If it's that little review the dependency. | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		LtWorf 5 months ago \| parent \| context \| favorite \| on: Shai-Hulud malware attack: Tinycolor and over 40 N... If it's that little review the dependency.

lukan 5 months ago [–]

The difference is, the dependency can change and is usually way harder to audit. Subfolders in subfolder, 2 lines here in a file, 3 line there vs locking at some files and check what they do.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact