Slacker News Slacker News logo featuring a lazy sloth with a folded newspaper hat
  • top
  • new
  • show
  • ask
  • jobs
Library

Comment by oulipo2

3 months ago

Sure, but then you need to have a way to whitelist

1 comment

oulipo2

Reply

lrvick  3 months ago

The whitelist is the package-lock.json of the hashes of libraries you or a security reviewer you trust has reviewed.

Slacker News

Product

  • API Reference
  • Hacker News RSS
  • Source on GitHub

Community

  • Support Ukraine
  • Equal Justice Initiative
  • GiveWell Charities