3 ms·

In this case the application also tries to auto-install dependencies, so making it read-only removes one of the stated features. I think this framework hasn't

In this case the application also tries to auto-install dependencies, so making it read-only removes one of the stated features. I think this framework hasn't been written with security in mind at all.

adrusi 8y ago
Whatever it's doing, it's not writing the packages into the application directory.
- SahAssar 8y ago
  If it can write to the applications dependencies isn't that as good as writing to the application?