3 ms·
Re-writing dependency source files with another dependency is a much worse idea than vetting your dependencies before you add them to your project IMHO
by wesleytodd 9y ago
Re-writing dependency source files with another dependency is a much worse idea than vetting your dependencies before you add them to your project IMHO
- jessaustin 9y agoMaybe there's a setting to roll back the install if it finds vulnerable dependencies, rather than trying to fix them?
- calibas 9y agoIf the only other solution is creating your own custom version of a vulnerable dependency, I can see how this could be useful. Not the "best" solution, but certainly practical as far as making code more secure.