4 ms·
Do you read every single line of code of every single dependency you have ? I don't see how llms are more of a threat than a random compromised npm package or s
by lm28469 2y ago
Do you read every single line of code of every single dependency you have ? I don't see how llms are more of a threat than a random compromised npm package or something from a OS package manager. Chances are you're already relying on tons and tons of "trust me bro" and "it's opensource bro don't worry, just read the code if you feel like it"
- aulin 2y agoOne thing is consciously sharing IP with third parties violating contracts, another is falling victim of malicious code in the toolchain. Npm concern though suggests we likely work in very different industries so that may explain the different perspective.