still need to read them to make sure you don't vendor a trojan in the first plac... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		baq 30 days ago \| parent \| context \| favorite \| on: Lotusbail npm package found to be harvesting Whats... still need to read them to make sure you don't vendor a trojan in the first place.

throw-12-16 30 days ago [–]

auditing is the first step in vendoring a dep by my definition of the practice

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact