News for hackers. Stuff that matters.
Re:Node.js adds support for direct registry-less HTTPS imports by giaour on Thursday February 10, 2022 @01:56PM (#30290804)
> I provided an example of why you would want to still load it remotely (specific situations where it's beneficial) rather than simply copying the code into the source repo

Doesn't Node cache imports, though? I think this approach would protect you if you were running a script on a timer (thus triggering a fresh load at a regular interval) but not if you were running an Express server (which would only verify the hash of the remote library at application startup).

There are no comments on this comment yet.