3 ms·
The idea that some team is "vetting" that the entire stack of stuff you'd pull from npm for a React front-end app is "safe" is ridiculous. Forget the mirroring;
by TheRealDunkirk 4y ago
The idea that some team is "vetting" that the entire stack of stuff you'd pull from npm for a React front-end app is "safe" is ridiculous. Forget the mirroring; that's trivial. What criteria or process would make you think you had a "vetted" snapshot, beyond what they already do!?
- slt2021 4y agoThis process is automated by static code analysis tools, once it is deployed then absolutely no meatbag effort is required