5 ms·
don't paid npm customers get to run their own instances of npm? They need some kind of lead time purely from a technical point of view to patch.
by Already__Taken 9y ago
don't paid npm customers get to run their own instances of npm? They need some kind of lead time purely from a technical point of view to patch.
- elmigranto 9y agoI think the point was that malicious actor gets early access to "exploits" by becoming paid customer and has a lot of time to pwn general public.