Re:Modifications to Google Chromium for removing Google inte...
by vemv on Sunday September 23, 2018 @10:05PM
(#18054529)
I should admit that my procedures are only marginally better than an average developer's.
Sadly I have no arbitrarily deep audit in place. I just try to pick solid projects, and assume / quickly check that their dependencies don't suck.
Also I'm particularly cautious with npm (as opposed to rubygems or clojars).
I should be looking into either (or both of):
- setting up a multi-user macOS ('me' + 'admin' + 'dev'. I normally operate under 'me'. sudo is only ever executed under 'admin'. Developer tooling is installed for 'dev', an account which cannot access the rest of the filesystem)
- using Docker and/or a VM for all dev activity, as a sandbox.
Sadly I have no arbitrarily deep audit in place. I just try to pick solid projects, and assume / quickly check that their dependencies don't suck.
Also I'm particularly cautious with npm (as opposed to rubygems or clojars).
I should be looking into either (or both of):
- setting up a multi-user macOS ('me' + 'admin' + 'dev'. I normally operate under 'me'. sudo is only ever executed under 'admin'. Developer tooling is installed for 'dev', an account which cannot access the rest of the filesystem)
- using Docker and/or a VM for all dev activity, as a sandbox.