To be honest? I don't know. Bugs (or malicious end-runs) are only shallow with m... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

eropple on Aug 1, 2017 | parent | context | favorite | on: Malicious crossenv package on npm

To be honest? I don't know. Bugs (or malicious end-runs) are only shallow with many eyes, and none of this has eyes on it.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact