News for hackers. Stuff that matters.

A comment on On the Weaponisation of Open Source. Parent comment

Re:On the Weaponisation of Open Source by Aeolun on Friday March 18, 2022 @09:05PM (#30729793)
Working with NPM every day, that’s kind of how I look at it. Maybe my computer will be randomly wiped one day, but it’s not something you can worry about if you want to retain your sanity.
[ Parent | on HN ]
Re:On the Weaponisation of Open Source by geocar on Saturday March 19, 2022 @03:19AM (#30731865)
> it's not something you can worry about if you want to retain your sanity.

I build my nodejs/npm stuff in containers. Actually I build almost everything that way.

There are a lot of advantages in addition to the security gains, such as that I don't need to rely on every javascript programmer in the world understanding semver (they don't, and I have wasted more of my "sanity" on tracking down API changes and sloppy type contracts than I ever have spent cleaning up after malice.

[ Parent | on HN ]
Re:On the Weaponisation of Open Source by Drdrdrq on Saturday March 19, 2022 @05:31PM (#30737755)
That's a nice idea, thank you! No more worrying about node versions either.
[ Parent | on HN ]