3 ms·
> Should we instead of these cooldowns just run builds in isolated contexts? I'd suggest both. Cooldown for 1-2 days is very cheap and you likely won't even no
by insanitybit 5mo ago
> Should we instead of these cooldowns just run builds in isolated contexts?
I'd suggest both. Cooldown for 1-2 days is very cheap and you likely won't even notice it, so it's quite harmless and from what I've seen even just 24 hours is enough to let security companies pick up malware.
But yeah, isolation is a must-have.
- spockz 5mo agoAt this point, is there an obligation of package managers, or at least npm to arrange the sandboxing themselves? Or as us or companies to wrap the build tools to provide the wrapping for them.
- insanitybit 5mo agoOh, absolutely they should do that.