Re:ESLint compromised, may have stolen your credentials
by fao_ on Thursday July 12, 2018 @04:15PM
(#17518236)
Everyone gives C's library distribution model shit, but at the end of the day installing through a distribution's repos is still much more secure than the alternatives.
[ Parent
| on HN ]
Re:ESLint compromised, may have stolen your credentials
by jessaustin on Thursday July 12, 2018 @04:36PM
(#17518383)
You can do that for javascript too, but you'll be getting older versions of everything. That will also be true if you're using a C package under active development. Distros, by design, aren't as quick to update as npm.