3 ms·
Super interesting project, but....uh oh, I see a package.json. I hope that our federal government has staffed enough experienced node devs to keep an eye on an
by game_the0ry 5y ago
Super interesting project, but....uh oh, I see a package.json.
I hope that our federal government has staffed enough experienced node devs to keep an eye on any rogue deps that get added to the project, though it should go without saying.
And it looks like they use Snyk so that's something.
However, I do not like that you have to email them to raise a security issue [1]. To easy for some wannabe product manager bureaucrat to suppress that out of fear and embarrassment.