News for hackers. Stuff that matters.
Re:Deno 1.0 by 29athrowaway on Thursday May 14, 2020 @12:56AM (#23175482)
Reproducible builds, sure. Security? that's a different story.

https://github.com/ChALkeR/notes/blob/master/Gathering-weak-...

- node ships with npm

- npm has a high number of dependencies

- npm does not implement good practices around authentication.

Can someone compromise npm itself? probably, according to that article.

There are no comments on this comment yet.