Re:Critical vulnerability of NPM package macaddress
by xorcist on Monday June 11, 2018 @11:58AM
(#17285350)
The "amateurish shenanigans" alluded to probably has nothing to do with the language but the project itself.
If anyone can commit anything and nobody ever reads what is to be commited, the repository must be regarded as attacker controlled. Some people will likely find that problematic.
If anyone can commit anything and nobody ever reads what is to be commited, the repository must be regarded as attacker controlled. Some people will likely find that problematic.