Hacker News Reader

> Do the security benefits of going Open Source outweigh the security costs?

Only if there are enough eyeballs. In practice that's only true for bigger projects.

On the other hand, would hackers target something that small? It seems to me like the benefits and drawbacks of open source for security would kick in around the same scale.

Yes and no. Popularity or user base and number of engineers looking at the code are probably correlated, but there are definitely exceptions, like:

* small NPM packages depended on by popular ones

* video game mods and tools

* open source end user utilities

Reply on news.ycombinator.com