2 ms·
I would assume any library is vetted for security, a company like Google cannot afford wild-west practices with dependencies. Adding a license audit to the proc
by fmajid 5y ago
I would assume any library is vetted for security, a company like Google cannot afford wild-west practices with dependencies. Adding a license audit to the process would not be a big imposition.
- klabb3 5y agoCorrect. The security vetting is indeed more cumbersome. All 3p code is reviewed with the same standards as internal projects, in theory.