Comment by eacapeisfutuile 3 years ago Generally yes, but ripping all conditions out of SECURITY.md should at least raise an eyebrow? 6 comments eacapeisfutuile Reply indrora 3 years ago Nobody was watching. Plain and simple.If you have commit access to it, and nobody is there to see, nothing stops you. eacapeisfutuile 3 years ago Yes but if that’s the sentiment how is this not as problematic as the npm ecosystem. snazz 3 years ago It’s similarly problematic but on a somewhat smaller scale and with fewer levels of nested dependencies. 3 replies →
indrora 3 years ago Nobody was watching. Plain and simple.If you have commit access to it, and nobody is there to see, nothing stops you. eacapeisfutuile 3 years ago Yes but if that’s the sentiment how is this not as problematic as the npm ecosystem. snazz 3 years ago It’s similarly problematic but on a somewhat smaller scale and with fewer levels of nested dependencies. 3 replies →
eacapeisfutuile 3 years ago Yes but if that’s the sentiment how is this not as problematic as the npm ecosystem. snazz 3 years ago It’s similarly problematic but on a somewhat smaller scale and with fewer levels of nested dependencies. 3 replies →
snazz 3 years ago It’s similarly problematic but on a somewhat smaller scale and with fewer levels of nested dependencies. 3 replies →
Nobody was watching. Plain and simple.
If you have commit access to it, and nobody is there to see, nothing stops you.
Yes but if that’s the sentiment how is this not as problematic as the npm ecosystem.
It’s similarly problematic but on a somewhat smaller scale and with fewer levels of nested dependencies.
3 replies →