Re:Webpack Project is sitting on a vulnerability, avoid it a...
by thepapanoob on Thursday June 28, 2018 @10:33AM
(#17417161)
also this is not even close to being an issue with webpack
[ Parent
| on HN ]
Re:Webpack Project is sitting on a vulnerability, avoid it a...
by tux_warrior on Thursday June 28, 2018 @10:41AM
(#17417217)
Problem with Webpack is that they are allowing such a long dependency chain for micromatch when a simple JavaScript /regex/ expression could do the trick. Their blatant refusal to remove that dependency (as seen in the github link) quite clearly indicates their willingness to perpetuate this dependency problem.