News for hackers. Stuff that matters.
Re:Webpack Project is sitting on a vulnerability, avoid it a... by tux_warrior on Thursday June 28, 2018 @10:41AM (#17417217)
Problem with Webpack is that they are allowing such a long dependency chain for micromatch when a simple JavaScript /regex/ expression could do the trick. Their blatant refusal to remove that dependency (as seen in the github link) quite clearly indicates their willingness to perpetuate this dependency problem.

There are no comments on this comment yet.