3 ms·
Here's the thing that bugs me about the JavaScript ecosystem. This is a database manager, so it's presumably going to be connecting to pretty sensitive systems,
by ryukafalz 6y ago
Here's the thing that bugs me about the JavaScript ecosystem. This is a database manager, so it's presumably going to be connecting to pretty sensitive systems, with pretty sensitive credentials. Do you think the developers have audited all of these dependencies? Do you think they can have possibly audited all of these dependencies?
https://github.com/beekeeper-studio/beekeeper-studio/blob/master/yarn.lock https://github.com/beekeeper-studio/beekeeper-studio/blob/ma...
- Aeolun 6y agoI’m not sure if that’s really relevant. I’m building those sensitive systems with Javascript, and just trust Snyk to notify me if anything untowards happens. It is literally impossible to audit all these libraries. But that’s the case for almost all languages with a package manager.