3 ms·
Integrating something like https://nodesecurity.io/opensource https://nodesecurity.io/opensource or https://snyk.io https://snyk.io into you're CI process will
by kimburgess 9y ago
Integrating something like https://nodesecurity.io/opensource https://nodesecurity.io/opensource or https://snyk.io https://snyk.io into you're CI process will help flag issues you may want to know about if they are disclosed / discovered.
And yes, I get the irony of adding another dependency to help with the security mess caused by the node ecosystem's bent towards external untrusted / unverified dependencies.