3 ms·
On the one hand very true, but on the other hand if you're a dev any python or nodejs package you install and run could do the same thing and the world mostly c
by kcorbitt 2y ago
On the one hand very true, but on the other hand if you're a dev any python or nodejs package you install and run could do the same thing and the world mostly continues working.
- Rygian 2y agoThat reasoning can be restated as "it's already really bad, so why not make it a bit worse".
- IshKebab 2y agoOr "it's not a significant risk in practice".
- MetaWhirledPeas 2y agoThose packages presumably have eyeballs on the source, deterministic output, and versions to control updates. That's pretty good compared to an automaton with slightly unknowable behavior patterns that is subject to unpredictable outside influences.