Login
From:
vlt /vōlt/ - blog
(Uncensored)
subscribe
The massive bug at the heart of the npm ecosystem
https://blog.vlt.sh/blog/the-massive-hole-in-the-npm-ecosystem
links
backlinks
Roast topics
Find topics
Find it!
An article detailing the massive bug at the heart of the npm ecosystem; encompassing a lack of validation by the public registry, package manifest inconsistancies & assumptions about package managers & security products