2 ms·
This is one of the reasons npm packages with a compiled minified dist js files are a bad idea, makes hiding malicious code surprisingly easy.
by jwlake 8y ago
This is one of the reasons npm packages with a compiled minified dist js files are a bad idea, makes hiding malicious code surprisingly easy.
- kentm 8y agoI'm not sure that it would matter much in practice. I don't think anyone really reads the code for their transitive dependencies.