Re:Polyfill supply chain attack hits 100K+ sites
by girvo on Tuesday June 25, 2024 @08:00PM
(#40795096)
I wish. When our bundles are being deployed globally and regularly opened on out of date phones and desktops, it can't be avoided yet.
[ Parent
| on HN ]
Re:Polyfill supply chain attack hits 100K+ sites
by lostmsu on Wednesday June 26, 2024 @02:55AM
(#40797121)
There might be a negative incentive in play: you may be compressing packages, but having your dependencies available at the tip of *pm install bloats overall size and complexity beyond what lack of bundling would give you.