4 ms·
once static code analyisis gets better this will become easy to detect.
by mike_HGolang 4y ago
once static code analyisis gets better this will become easy to detect.
- dane-pgp 4y agoI don't know why you are being silently downvoted, as I think it is worth talking about the potential of using static analysis to improve things. One promising approach is Endo[0] which "uses LavaMoat to automatically generate reviewable policies that determine what capabilities will be distributed to third party dependencies." [0] https://github.com/endojs/endo https://github.com/endojs/endo