2 ms·
Tangentially, this reminds me of Github's (very useful) feature that auto-notifies you when your Gemfile contains a gem known to have security vulnerabilities.
by danso 7y ago
Tangentially, this reminds me of Github's (very useful) feature that auto-notifies you when your Gemfile contains a gem known to have security vulnerabilities. Maybe someone will someday sue Github for not forcing a repo owner to fix a vuln, thereby causing people to unwittingly clone and use the codebase in production.
- gruez 7y agoDon't most OSS licenses have a "no warranties" clause that protects the author against this? I'm sure that github also has a clause in their ToS saying they make no warranties about the code posted to their platform.