3 ms·
This post includes a link to an earlier blog post on "reduce your supply chain risk" in 2024-02-29: https://blog.cloudflare.com/polyfill-io-now-available-on-cd
by omoikane 2y ago
This post includes a link to an earlier blog post on "reduce your supply chain risk" in 2024-02-29:
https://blog.cloudflare.com/polyfill-io-now-available-on-cdnjs-reduce-your-supply-chain-risk https://blog.cloudflare.com/polyfill-io-now-available-on-cdn...
In the earlier thread, there was a link to triblondon's post on 2024-02-25 where he urges users to remove that dependency:
https://x.com/triblondon/status/1761852117579427975 https://x.com/triblondon/status/1761852117579427975
Unfortunately, neither of these early warnings seem to have gotten much attention. I wonder if there is some news site or service that would make suspicious ownership transfers of this sort more noticeable? Or maybe this type of supply chain changes actually happen all the time and we just got used to them?