3 ms·
The Node.js Ecosystem Is Chaotic and Insecure
- austincheney 7y agoIf developers cared about security or their users they would managed their dependencies directly. Most developers don’t cared because they don’t wish to be inconvenienced. That isn’t primarily an ecosystem problem. It is a bad developer problem justified by common practice.
- greenyoda 7y agoNote: From March, 2018. Discussions from the original posts, for those who are interested: https://news.ycombinator.com/item?id=16900545 https://news.ycombinator.com/item?id=16900545 https://news.ycombinator.com/item?id=17143222 https://news.ycombinator.com/item?id=17143222