News for hackers. Stuff that matters.

A comment on Zed Editor automatically downloads binaries and NPM packages without consent. Parent comment

Re:Zed Editor automatically downloads binaries and NPM packa... by theultdev on Monday July 08, 2024 @12:10PM (#40906630)
How are you going to "vet" the language server when it pops up?

It's not a "random binary" either, it's a hosted binary for language features coming from the zed developers github release.

Even if the binary was compiled on demand when you clicked the button, were you going to go through the entire source of node to verify?

[ Parent | on HN ]
Re:Zed Editor automatically downloads binaries and NPM packa... by wtetzner on Wednesday July 10, 2024 @05:43PM (#40931828)
> How are you going to "vet" the language server when it pops up?

You may not vet the source of the language server, but you might want to determine which ones you are willing to trust/take the risk, and which ones you aren't.

[ Parent | on HN ]