News for hackers. Stuff that matters.
Re:NPM package event-source-polyfill compromised by politica... by exfascist on Friday April 08, 2022 @09:46PM (#30964555)
I don't run nigtly browser builds because that's too much to keep up with. I have actually read quite a bit of the code for the browser I use. I read almost everything I deploy because I'm responsible for it. Using other people's code absolves you from maintenance but not responsibility, that's something people need to start understanding. It's a very reasonable expectation that you read through your dependencies, if it's too much then it's time to trim some fat.

There are no comments on this comment yet.