Hacker News new | ask | show | jobs
by 2OEH8eoCRo0 684 days ago
That's a sensitive area for someone unknown to be touching.

You have no information about who you are or what you've done and you expect me to trust you with ssh keys and remotes?

The go.sum is concerning as well because now I need to trust all of those.

https://github.com/d3witt/viking/blob/main/go.sum

3 comments

Yikes, for an app like that, that is way too many dependencies to cross check.

I would argue this should be 100% avoided in production environments at this time.

Agreed. The project could have been implemented as a simple to inspect bash script and yet it has enough dependencies to fill up my screen.
Good point.