News for hackers. Stuff that matters.
Re:Malicious crossenv package on npm by thehardsphere on Thursday August 03, 2017 @10:00AM (#14919606)
> you assert that you have no problems - based on what?

The software works as intended and I know that my dependencies have not changed without me explictly changing them.

> Your deps.txt is barely different than a lock file here.

That command produces a tree of all dependencies and their dependencies. I don't know what that has to do with a lock file.

There are no comments on this comment yet.