It’s even scarier when you actually sit down and review some of the code you’ve been importing for years…
It has resulted in a major thinking shift for me. Mostly initiated by a malicious nodejs package being quietly pulled in.
It has resulted in a major thinking shift for me. Mostly initiated by a malicious nodejs package being quietly pulled in.
I am fortunate that my own contributions only require that.