3 ms·
This is not a vulnerability (ie. security bug) it's an attack (ie. malicious).
by remram 5y ago
This is not a vulnerability (ie. security bug) it's an attack (ie. malicious).
- Vinnl 5y agoIt doesn't really matter how you call it; the problem is that there could be CVE's in your devDependencies that affect your production build, and pruning those dependencies after using them to create that build doesn't remove the risk.