3 ms·
I wonder how many widely used github projects rely on cryptic "random small packages from a pull request" that possibly introduce backdoors.
by jojobas 7y ago
I wonder how many widely used github projects rely on cryptic "random small packages from a pull request" that possibly introduce backdoors.
- GrumpyNl 7y agoSo many, its shocking, but it seems no one cares.
- avetisk 7y agoThe problem is that when you try to not do so, there’s a bunch who comes at you with knifes at your throat: “it’s not our job to code and maintain this”. Even something which would require 5 lines of code, they would install a package.