Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
erjtajrtwjwr
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
3 ms
·
1.
▲
by
erjtajrtwjwr
5y ago
You're blindly relying on transport security currently, and that's unacceptable even when distributing your own code. Integrity verification of distributed packages (ideally cryptographically) is a core and required feature of a p
2.
▲
by
erjtajrtwjwr
5y ago
Oh yay, another package manager with absolutely no security. Let's pull and execute code from the internet with no way to validate where packages came from or if they've been tampered with.