Re:Today’s JavaScript trash fire and pile on
by ummonk on Monday November 26, 2018 @05:02PM
(#18537237)
The trust issue is a fundamental issue with volunteer / anonymously-contributed open source.
At least with paid software, in theory if not in practice, the organization publishing the software is responsible for verifying it, and for keeping track of whom it is employing to contribute to the code, so you can figure out who to lock up if they intentionally push malicious code.
At least with paid software, in theory if not in practice, the organization publishing the software is responsible for verifying it, and for keeping track of whom it is employing to contribute to the code, so you can figure out who to lock up if they intentionally push malicious code.