2 ms·
It was caught just in time so the “badness” in terms of “what do I need to do to mitigate this right now” is thankfully pretty low. But IMO the real “bad” here
by afavour 3y ago
It was caught just in time so the “badness” in terms of “what do I need to do to mitigate this right now” is thankfully pretty low.
But IMO the real “bad” here is that it calls into question the entire model of volunteer open source contribution, which underpins a crazy amount of the tech world. No easy answers there.