I tried writing some JavaScript today. I tried not to add any frivolous dependencies. I ended up with 18k dependencies. This is not a joke.
Show this thread
-
I guess at some point you just have to trust your direct dependencies to do their due diligence, or conversely choose only the ones you think would.
Nobody is doing their due diligence at the scale of 18k. This is at the point where literally by sheer probability alone one of them is going to have malicious code.
-
-
How's the audit of Gemfile.lock going btw? ;)
-
I'm the wrong person to ask
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.