3 ms·
This. am I really expected to review every change that 179 authors make to 242 packages? And if I don't, am I responsible for the malicious code insertion, or
by marcus_holmes 7y ago
This. am I really expected to review every change that 179 authors make to 242 packages?
And if I don't, am I responsible for the malicious code insertion, or is NPM going to take responsibility for that?
- SahAssar 7y agoYou are responsible for malicious code insertion either way. If you delegate trust in any way, you are responsible for how that trust was (mis)used.