Re:Today’s JavaScript, from an outsider’s perspective (2020)
by mojuba on Friday May 27, 2022 @05:32AM
(#31527628)
Yes it's a problem, but because you (as a library maintainer) are responsible for what you are embedding, you should keep an eye on the dependencies and test them with each update. This creates a hierarchy of responsibilities, as opposed to a flat mess that is Linux .so or Windows .dll approach.
Though it's still not great if everyone uses their own SSL library, because then you can't update it if there's a bug.