Re:Webpack Project is sitting on a vulnerability, avoid it a...
by tux_warrior on Thursday June 28, 2018 @10:41AM
(#17417217)
Problem with Webpack is that they are allowing such a long dependency chain for micromatch when a simple JavaScript /regex/ expression could do the trick. Their blatant refusal to remove that dependency (as seen in the github link) quite clearly indicates their willingness to perpetuate this dependency problem.
[ Parent
| on HN ]
There are no comments on this comment yet.