|
|
|
|
|
|
by zasz
7 days ago
|
|
|
It's worded a bit strongly, but it encourages critical thinking about downloading dependencies, how vetting should work, and where the human factor comes in. I think the top comment was right that some security researchers will audit packages no matter what, but it's good to not take that for granted. |
|
|