News for hackers. Stuff that matters.

A comment on Show HN: Passbolt – open-source password manager for teams. Parent comment

Re:Show HN: Passbolt – open-source password manager for teams by drdaeman on Wednesday April 27, 2016 @03:08PM (#11583575)
Sacrasm aside, saying "node.js" strongly implies use of npm, and that means pulling a lot (think deps-of-deps-of-deps) of potentially unaudited code off the network, without much authentication.

Not something one would fancy for a tool that handles sensitive data.

[ Parent | on HN ]
Re:Show HN: Passbolt – open-source password manager for teams by icedchai on Wednesday April 27, 2016 @03:15PM (#11583637)
I was only being slightly sarcastic. I installed an app with a relatively small number of dependencies, and was shocked to see my node_modules directory contained over 100,000 files.
[ Parent | on HN ]