Hacker News new | ask | show | jobs
by taeric 2023 days ago
While I don't disagree, you can get rather far by limiting what you allow in the evaluation. There is no reason you have to pull it in in your current environment directly.

And then you have an easy mechanism to allow some configs from trusted parties to be a bit more capable, if they need it.