4 ms·
Yeah, but if that app was built using a malicious dependency that only relied on the same permissions the app already uses, you’d just click “Yes” and move on a
by christophilus 10mo ago
Yeah, but if that app was built using a malicious dependency that only relied on the same permissions the app already uses, you’d just click “Yes” and move on and be pwned.
- irishcoffee 10mo agoOh, I don't npm. If I can't yum (et.al.) install it I absolutely review the past major point releases for an hour and do my research on the library.
- SoftTalker 10mo agoIs there any guarantee that yum (et. al.) packages are audited?
- irishcoffee 10mo agoWhat would qualify as a "guarantee" for you?