News for hackers. Stuff that matters.

A comment on Backdoor in event-stream library dependency. Parent comment

Re:Backdoor in event-stream library dependency by kurtisc on Monday November 26, 2018 @01:28PM (#18535617)
If you're using auto-updating external packages, aren't you effectively giving the package author commit access to your derivative project too?
[ Parent | on HN ]

There are no comments on this comment yet.