Re:Embedded Malicious Code in node-ipc
by jka on Sunday March 20, 2022 @05:44PM
(#30746989)
Supplier-side: multi-party code review for acceptance of changes into widely-used software.
Consumer-side: multi-party review prior to upgrades of dependencies in applications.
(note that neither of these necessarily require knowing the identity of the software author(s). in fact, perhaps reviews would be less biased in the absence of that information)
Consumer-side: multi-party review prior to upgrades of dependencies in applications.
(note that neither of these necessarily require knowing the identity of the software author(s). in fact, perhaps reviews would be less biased in the absence of that information)