Replies to message #2,515

  • 🔎 If you see an alert for analytics.usips.org, this is a self-hosted system I am running as a test. It is GDPR compliant and collects no invasive information.
Spasticus Autisticus

Open Source Software Community

To be fair it hasn't been all npm packages. log4j is probably the worst of all of them, although that was just shoddy work and not a malicious attack.
Polish Businessman

Open Source Software Community

Well, there kind of is. The earliest versions of NPM didn't provide a way to lock down versions of dependencies at all, you had to use external...
Back
Top Bottom