3 ms·
The problem with npm is that you'll have to read a LOT of transitive dependencies. There is a reason why there is a large cottage industry doing security scann
by fault1 5y ago
The problem with npm is that you'll have to read a LOT of transitive dependencies.
There is a reason why there is a large cottage industry doing security scanning of npm deps.
In the end it all depends on who you trust.