News for hackers. Stuff that matters.

A comment on Why has software supply chain security exploded?. Parent comment

Re:Why has software supply chain security exploded? by gw99 on Wednesday September 07, 2022 @05:19AM (#32748372)
It’s even scarier when you actually sit down and review some of the code you’ve been importing for years…

It has resulted in a major thinking shift for me. Mostly initiated by a malicious nodejs package being quietly pulled in.

[ Parent | on HN ]
Re:Why has software supply chain security exploded? by jrib on Wednesday September 07, 2022 @06:12AM (#32748730)
Is there a language ecosystem you prefer now?
[ Parent | on HN ]
Re:Why has software supply chain security exploded? by gw99 on Thursday September 08, 2022 @05:18AM (#32763176)
I mostly write stuff in Go with no imports at all now. It’s just that and stock vim on macOS is my entire stack.

I am fortunate that my own contributions only require that.

[ Parent | on HN ]