4 ms·

Especially those without a commercial contract. I'm fine paying for an api but what is unprofessional is installing random stuff from github.com/GuyProgrammer/

• luismedel 2y ago
  It surprises me how much companies rely on that kind of projects without 1) making a proper assessment and 2) cloning the project to ensure it isn't tampered in the future.
  • TZubiri 2y ago
    Not only do they not clone projects or freeze their dependencies, but they are pressured to constantly update to the latest version to avoid vulnerabilities ( while introducing risk of new ones)