3 ms·
> and that code is now five years old and you haven't touched it for five years, you might have some security vulnerabilities too Security vulnerabilities grow
by nottorp 1y ago
> and that code is now five years old and you haven't touched it for five years, you might have some security vulnerabilities too
Security vulnerabilities grow in unattended code then?
Or they were there from the second the code was written but with some luck someone noticed them and fixed them?
Old code isn't necessarily insecure just because it's old...
- victorbjorklund 1y agoDoesnt matter if you count them from the second the code is written or when they are discovered. The same issue is in code written by someone else or yourself.
- nottorp 1y agoThe point is that freshly updated code has the same chance of being buggy. You want me to believe that in the npm "ecosystem" they have LTS branches that only get security updates? For anything besides maybe a few large libraries with companies behind them?