Re:Show HN: Kairos – Open-source risk and fraud decisioning ...
by factotvm on Wednesday November 04, 2026 @12:38AM
(#50361837)
I love that this is open source, thank you. My issue is the choice of TypeScript on Node. Now, I'm not a JavaScript developer, but for a gatekeeper on money, I'd want a program that can't modify itself from external sources. Programs in this runtime can rewrite themselves while running, and the Dockerfile doesn't set the flag that locks this down. So as it stands, nothing at the runtime level prevents prototype pollution. And a configuration defect is the kind of bug that keeps on giving, not to mention that the flag itself is still experimental.
[ Parent
| on HN ]
There are no comments on this comment yet.