3 ms·
It's usually a bit silly, yes i trust the author of this directory but I have no clue about the authors under node_modules.
by conceptme 5y ago
It's usually a bit silly, yes i trust the author of this directory but I have no clue about the authors under node_modules.
- krono 5y agoYeah I think people really underestimate how massive of a security liability node modules are in the way the system currently works. Fixing it should really be given top priority, but doesn't look to be a very popular subject when you compare it to some of the others such as whether or not ESLint should become a NodeJS core module ...
- franga2000 5y agoNPM is one of the most dangerous implementations, but the whole concept of pulling in thousands of unknown dependencies is dangerous on its own, even in other languages.