News for hackers. Stuff that matters.

A comment on Npm Audit: broken by design?. Parent comment

Re:Npm Audit: broken by design? by twistedpair on Wednesday July 07, 2021 @03:17PM (#27764785)
Would be nice if package.json had a flag to indicate the runtime would be either Node.js or a browser. So many of these "bugs" have no bearing in a browser context.
[ Parent | on HN ]
Re:Npm Audit: broken by design? by gforge on Thursday July 08, 2021 @02:19AM (#27768918)
The package.json should be able to actively ignore vulnerability id's. As id's disappear with audits the npm audit could just remove those, eg a "prune"
[ Parent | on HN ]