Comment by burnt-resistor
14 hours ago
This is a key vulnerability of package publication without peer review plus curation. Going to have to have many more automated behavioral code coverage analysis plus human reviewers rather than allowing unlimited, instant publication from anyone and everyone.
No comments yet
Contribute on Hacker News ↗