3 ms·
> Of course you could just copy the code, but then that increases LOC in my codebase that I'm responsible for. Once your company is owned by a supply chain att
by pilif 4y ago
> Of course you could just copy the code, but then that increases LOC in my codebase that I'm responsible for.
Once your company is owned by a supply chain attack or by an RCE in one of your dependencies, you will learn that you are in-fact very much responsible for the code in your external dependencies.
- tylersmith 4y agoThis drives me crazy. If your software is using a library that library is part of your software whether you originated its code or not. If you are responsible for the software then you're responsible for the LOC in every library your software depends on.