3 ms·
Agreed with the sentiment of the author, but are teams really arguing for pulling in dependencies in the name of security? I’ve seen the exact opposite — every
by medhir 2y ago
Agreed with the sentiment of the author, but are teams really arguing for pulling in dependencies in the name of security?
I’ve seen the exact opposite — every dependency introduces a new opportunity for vulnerabilities, and to be judicious in pulling in new ones due to the potential security risk.