Backdoored Dependency in Event Stream
- Dominant language
- No language data
- Stars
- 66
- Forks
- 10
- PR merge metrics
- No merged PRs in 30d
Description
An example of how security _naivety_ can cause harm:
https://github.com/dominictarr/event-stream/issues/115
https://github.com/dominictarr/event-stream/issues/116
discussion: https://news.ycombinator.com/item?id=18534392
This in a nutshell is why Node.js is a house of cards that _cannot_ be trusted from a security perspective. 💔
> Meta/Note: I've opened this issue to hold the basic details of a post on security. ✍️
> Sadly, most people don't care about security, they only want to get their _current_ work done, collect their paycheque and get back to their hobbies/socialising/netflix. 😞
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.