3 ms·
Does this have a package management system? In my opinion, npm is the main benefit of node servers (although it's also the main weakness as far as security is c
by gitgud 7y ago
Does this have a package management system? In my opinion, npm is the main benefit of node servers (although it's also the main weakness as far as security is concerned).
If there's no package management capability, then do people have to manage dependencies themselves?
Or if there is one, how is it more secure/trust-worthy than npm?
- tlhunter 7y agoWhile there currently is no package management system it is possible to use webpack and manually compile certain simpler npm packages (think Lodash) into a format which can be imported by Osgood. We would like to come up with an automated solution for this one day. Since Osgood requires I/O to be whitelisted this removes multiple categories of attacks which would affect Node.js apps loading a malicious module.