3 ms·
What is the difference between downloading a wordpress plugin and running it in your server and downloading a jar from maven/a js package from npm and running i
by csunbird 5y ago
What is the difference between downloading a wordpress plugin and running it in your server and downloading a jar from maven/a js package from npm and running it?
- marcus_holmes 5y agoNothing. These are also very, very dangerous and expose your site to supply-chain attacks. The article linked to here [0] which is a must-read for everyone who feels that adding a dependency is safe. [0] https://medium.com/hackernoon/im-harvesting-credit-card-numbers-and-passwords-from-your-site-here-s-how-9a8cb347c5b5 https://medium.com/hackernoon/im-harvesting-credit-card-numb...
- jmnicolas 5y agoI work with C#, most (all?) Nugget packages I download are open source, which isn't the case of a lot of WP plugins that are obfuscated. They're also centrally managed by Microsoft, so if there was a problem with one package they could kick it out of the Nugget repo. But in the end you're right, it's mostly a matter of trust and finger crossed.