rem’s avatarrem’s Twitter Archive—№ 66,994

  1. <1 day since hearing about the npm audit functionality, and already 2 issues filed where the author doesn't understand where the vuln lives, nor why it lives, nor actual remediation. This is not good for security.
    1. …in reply to @rem
      What annoys me more, is that the source of the vuln propagating upstream hasn't actually received any issues yet… which speaks volumes to me.