Hacker News new | ask | show | jobs
by tailspin2019 1792 days ago
Yep.

Unfortunately it’s not clear cut that we don’t have to worry about devDependencies vulnerabilities.