Re:Malicious code in the purescript NPM installer
by steveklabnik on Sunday July 28, 2019 @09:57PM
(#20550933)
Cargo is more like npm than Bundler in this regard, as Bundler does not let you have multiple versions of a package at the same time. That lesson was learned from npm, though implemented in a different way.
[ Parent
| on HN ]
There are no comments on this comment yet.