Forgot your password?
typodupeerror

Comment Supply chain self-hack (Score 1) 32

I had a coworker who used to add lodash and axios to like every project. I had to repeatedly reject PRs that pulled in 50MiB of code to do basic shit JavaScript already does. Like lodash is the source of insane amounts of security bulletins, and all it's being used for is one-line functions. Axios is a monstrosity that (poorly) duplicates the functionality of the web standard fetch API that already does everything you'll ever need.

Anyone using these packages deserves to get hacked.

Comment Re: PE standards of suck-sess. (Score 1) 49

Issue is overblown. It's essentially limited to things like Actions that aren't their core offering, but a way to drive Azure revenue. If your automated code checks and PR notifications are delayed by a couple hours, it's rarely that big of an impact. In addition, finding a slice of time with 90% uptime is not the same as operating with 90% uptime.

Slashdot Top Deals

Clothes make the man. Naked people have little or no influence on society. - Mark Twain

Working...