-
Vulnerabilities in npm packages has become a race to the bottom to report and hassle. Search nodemon issues and in all the years there's been one legit vuln. All others are impossible to reach, but people think if you carry the package there's a chance to file an issue.
-
I'm whining because when my morning starts with 3 emails about vulns that aren't actual vulns, sad rem gets sad.