rem’s avatarrem’s Twitter Archive—№ 55,497

  1. …in reply to @qubyte
    qubyte yeah, npm (the package) actually protects itself from this kind of thing by bundling all their deps (if I read it right).