3 ms·
Using third party libraries in production libraries, regardless of its license, means you audit, vet, and test as much as possible the consequences of bringing
by wheresmycraisin 5y ago
Using third party libraries in production libraries, regardless of its license, means you audit, vet, and test as much as possible the consequences of bringing in the library. And going through the same process every time you update the library. "Who does that?" Good software engineers do that.
- watwut 5y agoThat is just not a thing that would be expected or normal. Not for run of the mill commercial software It would also be irrational. The rare security issue like this is kot a good enough reason for such massive undertaking. You manage risks, you are not supposed to act purely out of fear. > Good software engineers do that. The amount of effort required would necessitate management sign up for this. And they won't, because it is not rational thing to do for majority of software.