3 ms·
The problem with your idea is that you need to find the person who wants to do all this auditing of every version of Node/Python/Ruby libraries.
by hombre_fatal 1y ago
The problem with your idea is that you need to find the person who wants to do all this auditing of every version of Node/Python/Ruby libraries.
- lillecarl 1y agoI believe good centralized infrastructure for this would be a good start. It could be "gamified" and reviewers could earn reputation for reviewing packages, common packages would be reviewed all the time. Kinda like Stackoverflow for reviews, with optional identification and such. And honestly an LLM can strap a "probably good" badge on things with cheap batch inference.
- pabs3 1y agoDecentralised auditing is what is needed. https://github.com/crev-dev/ https://github.com/crev-dev/