3 ms·
I'm guessing companies assume that whatever code gets written in-house will have more vulns that some widely used open source project... Not to mention the cost
by burntoutfire 6y ago
I'm guessing companies assume that whatever code gets written in-house will have more vulns that some widely used open source project... Not to mention the cost to re-implement the world (sans the OS and compiler) would be astronomical and put most projects into the "not worth it" category.
- gjvc 6y agoI'm not talking about not-reinventing-the-wheel, I'm talking about making network calls by default, to fetch dependencies. This makes review of such things seem obstructive. As ever, convenience and security are opposing forces.