3 ms·
Why would small functions like "difference", "groupBy", "flatten", etc. have CVEs and require bug fixes? Implementing those correctly is a one and done thing
by hofrogs 1y ago
Why would small functions like "difference", "groupBy", "flatten", etc. have CVEs and require bug fixes? Implementing those correctly is a one and done thing
- jsheard 1y agoYou'd be surprised: https://positive.security/blog/lodash-ramda-underscore-vulnerabilities https://positive.security/blog/lodash-ramda-underscore-vulne...
- hofrogs 1y agoLooks like these are mostly based on "reserved" attributes (with double underscores that have no special meaning in the language, just make unintentional collisions less likely), a modern solution utilizing JS Symbol type (where needed) would have no such issues