2 ms·
I have issues with js as a language but those are not security issues. My security-related issues are with the nodejs package infrastructure. https://www.csoon
by Rhapso 9y ago
I have issues with js as a language but those are not security issues. My security-related issues are with the nodejs package infrastructure.
https://www.csoonline.com/article/3214624/security/malicious-code-in-the-node-js-npm-registry-shakes-open-source-trust-model.html https://www.csoonline.com/article/3214624/security/malicious... The sprawling dependencies alongside potential security/breaking issues are huge. It is a large and vulnerable attack surface.
- happynaut 9y agoFair play!