News for hackers. Stuff that matters.

A comment on Crev: dependency vetting with a web of trust. Parent comment

Re:Crev: dependency vetting with a web of trust by fiddlerwoaroof on Friday January 04, 2019 @01:32PM (#18826446)
It would be useful to know if the MIT library you’re depending on pulls in a AGPL transitive dependency.
[ Parent | on HN ]
Re:Crev: dependency vetting with a web of trust by mindB on Friday January 04, 2019 @04:09PM (#18827646)
I don't see how a cryptographic WoT system is necessary for that kind of concern. That sounds like more tooling needed around the language's basic packaging system.
[ Parent | on HN ]