All Questions
2 questions
11
votes
2
answers
4k
views
Are devDependencies in Node.js exploitable?
I am well aware that the best approach is to update any dependency, no matter whether it is a development dependency or a runtime/production dependency.
But from a research prospective, I want to know ...
- 183
2
votes
1
answer
449
views
How can the validity and safety of a software library be checked?
So beyond looking at the source code for particular software library, is there a way to vet that it does not contain malicious code? As far as I know from my own research, services like pip, npm, and ...
- 23