2 ms·
Blind trust in open source package managers. Look at the damage the removal of left-pad from npm caused, for example, and imagine what could have happened if th
by paulgb 9y ago
Blind trust in open source package managers. Look at the damage the removal of left-pad from npm caused, for example, and imagine what could have happened if the author had malicious intent.
- gargravarr 9y agoThis is THE number 1 cause of build failures where I work, and is of particular concern for me because the Jenkins cluster I work with runs all slave nodes as a local admin user - certain products WILL NOT build otherwise. One malicious package could completely compromise a significant amount of our infrastructure.