6 ms·
You are absolutely right. The dangerous part of NPM packages is the post-install script. Therefore moving from JavaScript to Java removes the threat.
by Rp8yXmdmr 4mo ago
You are absolutely right. The dangerous part of NPM packages is the post-install script. Therefore moving from JavaScript to Java removes the threat.
- grezql 4mo ago[dead]
- OrangeMusic 4mo agoYou joke but, yeah, when you think about it, the problem with Javascript is the 'script' part. That's actually correct.