2 ms·
Sure, but let's also take the code hosting situation into account: npm now comes with security audits during install, and github now comes with free dependency
by TheRealPomax 7y ago
Sure, but let's also take the code hosting situation into account: npm now comes with security audits during install, and github now comes with free dependency vulnerability monitoring. While "fewer deps means fewer vectors" is true, the security landscape has changed an unusual amount, and for the better, since that article was written.
- quantummkv 7y ago> npm now comes with security audits during install, and github now comes with free dependency vulnerability monitoring Ultimately, these are solutions to problems that should not exist in the first place.