3 ms·
The package author has a point > the verification process of vulnerability reports doesn't involve maintainer at all, and it sounds like the commercial interes
by 29athrowaway 2y ago
The package author has a point
> the verification process of vulnerability reports doesn't involve maintainer at all, and it sounds like the commercial interest of advisory repositories is aligned with creating more vulnerabilities and proving themselves “useful" to companies that utilize them.