News for hackers. Stuff that matters.

A comment on Show HN: Pgsh – branch Postgres like Git. Parent comment

Re:Show HN: Pgsh – branch Postgres like Git by marcus_holmes on Tuesday November 26, 2019 @07:29PM (#21644193)
This. am I really expected to review every change that 179 authors make to 242 packages?

And if I don't, am I responsible for the malicious code insertion, or is NPM going to take responsibility for that?

[ Parent | on HN ]
Re:Show HN: Pgsh – branch Postgres like Git by SahAssar on Wednesday November 27, 2019 @07:04AM (#21647181)
You are responsible for malicious code insertion either way.

If you delegate trust in any way, you are responsible for how that trust was (mis)used.

[ Parent | on HN ]