News for hackers. Stuff that matters.
Re:Malicious code in the purescript NPM installer by huehehue on Monday July 29, 2019 @12:52AM (#20551607)
There are a slew of dev-only dependencies in JS-land. Packages that run local servers for hot-reloading during development. Test runners, linters, TypeScript compilers, SCSS compilers, and so on. None of those things need to be included with the bundled product.

Check out Electron or React starter apps for an example, their boilerplates should have dozens of examples.

There are no comments on this comment yet.