3 ms·
gems don't, NPM doesn't, PyPI doesn't, NuGet doesn't.... you get the picture. Basically all apps using package repo's (i.e. all of them) are relying on massive
by raesene9 8y ago
gems don't, NPM doesn't, PyPI doesn't, NuGet doesn't.... you get the picture.
Basically all apps using package repo's (i.e. all of them) are relying on massive piles of unaudited 3rd party code with usually no idea of provenance.