4 ms·
You can still get patch emails with Git repositories. In fact, you can easily create them from your own copy of the repo. This hack has nothing to do with the
by bjpbakker 8y ago
You can still get patch emails with Git repositories. In fact, you can easily create them from your own copy of the repo.
This hack has nothing to do with the scm but everything with the carelessness of npm.
- dboreham 8y agoI must be misunderstanding the attack: didn't it involve checking in malicious code to a repo used to build a package published in npm? Or are you suggesting that all code in github should be considered untrusted, but somehow able to be verified by npm?