3 ms·
> The one and only solution here is – don't pull code from sources you don't fully trust. An idea that is antithetical to the whole ecosystem surrounding npm/J
by Someone1234 5y ago
> The one and only solution here is – don't pull code from sources you don't fully trust.
An idea that is antithetical to the whole ecosystem surrounding npm/JavaScript. You can be careful with your direct dependencies, but their dependencies and those things dependencies? That's how a bunch of otherwise very respectable/well engineered projects ended up with left-pad in them.