News for hackers. Stuff that matters.
Re:3500 packages uploaded to PyPI, pointing to a malicious URL by bpt3 on Tuesday March 02, 2021 @04:13PM (#26320841)
> What's the point of a philosophy that is impossible to live up to. Nobody audits a substantial fraction of their dependencies.

It's a choice to be ignorant of your dependencies, not a law of nature.

The fact that most people don't audit code they depend upon is a problem to be fixed, unless the underlying code is fixed first.

There are no comments on this comment yet.