3 ms·
Deno has tackled some of these issues with their permission system, but afaik it can only be applied to apps, not to dependencies. What we really need is a sys
by silverwind 10mo ago
Deno has tackled some of these issues with their permission system, but afaik it can only be applied to apps, not to dependencies.
What we really need is a system to restrict packages in what they can do (for example, many packages don't need network access).
- duncanbeevers 10mo agoLavamoat purports to do this. https://lavamoat.github.io/ https://lavamoat.github.io/ There has been some promising prior research such as BreakApp attempting to mitigate unusual supply-chain compromises such as denial-of-service attacks targeting the CPU via pathological regexps or other logic-bomb-flavored payloads.