News for hackers. Stuff that matters.

A comment on Faker.js is now a community controlled project. Parent comment

Re:Faker.js is now a community controlled project by DeepYogurt on Sunday January 16, 2022 @09:26PM (#29962710)
> does that allow Cloudflare to take over the packages too?

Fundamentally cloudflare can do that if they so chose. If your threat model doesn't account for that sort of action then you should reassess.

[ Parent | on HN ]
Re:Faker.js is now a community controlled project by nightpool on Monday January 17, 2022 @12:24AM (#29963595)
Can != Should. we're not discussing whether Cloudflare had the physical capability of being able to take over the packages. We're asking if they should. Many people seem to believe that they should have, or would have been justified in doing so, and others disagree.
[ Parent | on HN ]