4 ms·
IMHO there are only 2 long-term solutions to this type of problems: 1) Reduce the number of external dependences as much as possible 2) Pay authors to properly
by ivanhoe 8y ago
IMHO there are only 2 long-term solutions to this type of problems:
1) Reduce the number of external dependences as much as possible
2) Pay authors to properly maintain the packages that you rely on. If you use them on commercial projects it's the first and the cheapest possible security measure you should invest in.
- abecedarius 8y agoThe best solution is a module system that obeys the principle of least authority. An event-stream library shouldn't be able to find your cryptocurrency wallet, or communicate back to its author either.