3 ms·
Are you claiming that Node/NPM is somehow a less vulnerable ecosystem than .NET/NuGet?
by bob1029 4y ago
Are you claiming that Node/NPM is somehow a less vulnerable ecosystem than .NET/NuGet?
- Jenk 4y agoNope. Next strawman, please.
- wongarsu 4y agoThat's not what they said. They said .NET/NuGet shares some of the problems NPM has, and that it's targeted more because it's a juicer target. That doesn't mean it's more vulnerable, but it means it has to be less vulnerable to offer the same security. To offer a bad analogy: if a bank vault was as vulnerable as my fridge, people would constantly break into the bank vault but keep ignoring my fridge.