Re:What NPM should do to stop a new colors attack
by shepherdjerred on Tuesday January 11, 2022 @01:38PM
(#29895685)
I totally agree.
We need better tools to prevent things like this from happening again because nobody is ever going to audit the 2000 dependencies of every new create-react-app release.
We need better tools to prevent things like this from happening again because nobody is ever going to audit the 2000 dependencies of every new create-react-app release.