4 ms·
Am I the only one that sees so many third party dependencies and gets nervous? All it takes is one bad plugin or maintainer change for your entire system to be
by llmblockchain 2y ago
Am I the only one that sees so many third party dependencies and gets nervous? All it takes is one bad plugin or maintainer change for your entire system to be owned.
- troad 2y agoYou are definitely not the only one. It's wild to me the extent to which some devs just sorta volunteer for RCE. And often, for the most superficial of reasons? "Oooh, this plugin adds emoji error messages!" one hundred and forty-three black-box dependencies from anonymous github accounts later...
- llmblockchain 2y agoI agree-- though I've been downvoted for the comment. I guess Jia Tan is a user here ;p