News for hackers. Stuff that matters.

A comment on NPM package event-source-polyfill compromised by political activists. Parent comment

Re:NPM package event-source-polyfill compromised by politica... by the8472 on Friday April 08, 2022 @08:18PM (#30964032)
Depends on how much the company values (i.e. is paying for) that supply chain security. And if enough companies cared they could even save money by pooling efforts.
[ Parent | on HN ]
Re:NPM package event-source-polyfill compromised by politica... by pabs3 on Friday April 08, 2022 @11:16PM (#30965007)
The crev folks aim to create a tool to allow that pooling:

https://github.com/crev-dev/

[ Parent | on HN ]