Re:NPM package event-source-polyfill compromised by politica...
by exfascist on Friday April 08, 2022 @09:46PM
(#30964555)
I don't run nigtly browser builds because that's too much to keep up with. I have actually read quite a bit of the code for the browser I use. I read almost everything I deploy because I'm responsible for it. Using other people's code absolves you from maintenance but not responsibility, that's something people need to start understanding. It's a very reasonable expectation that you read through your dependencies, if it's too much then it's time to trim some fat.
[ Parent
| on HN ]
There are no comments on this comment yet.