News for hackers. Stuff that matters.

A comment on Beekeeper Studio is a free and open source SQL editor and database manager.

Re:Beekeeper Studio is a free and open source SQL editor and... by ryukafalz on Sunday May 31, 2020 @08:15AM (#23369050)
Here's the thing that bugs me about the JavaScript ecosystem. This is a database manager, so it's presumably going to be connecting to pretty sensitive systems, with pretty sensitive credentials. Do you think the developers have audited all of these dependencies? Do you think they can have possibly audited all of these dependencies?

https://github.com/beekeeper-studio/beekeeper-studio/blob/ma...

[ Parent | on HN ]
Re:Beekeeper Studio is a free and open source SQL editor and... by Aeolun on Sunday May 31, 2020 @08:28AM (#23369133)
I’m not sure if that’s really relevant. I’m building those sensitive systems with Javascript, and just trust Snyk to notify me if anything untowards happens.

It is literally impossible to audit all these libraries. But that’s the case for almost all languages with a package manager.

[ Parent | on HN ]