4 ms·
How is _your_ supply chain a concern of this open source developer?
by dchest 7mo ago
How is _your_ supply chain a concern of this open source developer?
- ZeroAurora 7mo ago_My_ supply chain is not a big deal, lol. But this is HTTPX. A network library that has a considerable number of users. When I say _considerable_, I'm essentially saying _nearly every_ big tech. The one I can tell for sure is OpenAI (not a fan of them though). Remember xz attack?
- dchest 7mo agoWhy can nearly every big tech take care of their supply chain? :) Clearly, the maintainer doesn't want to do this job anymore, and it's not a requirement when releasing your code to also do stuff unrelated to programming.
- nijave 7mo agoThe parent poster never said it was. They just claimed it's risky for them which I agree with