rem’s avatarrem’s Twitter Archive—№ 66,995

    1. <1 day since hearing about the npm audit functionality, and already 2 issues filed where the author doesn't understand where the vuln lives, nor why it lives, nor actual remediation. This is not good for security.
  1. …in reply to @rem
    What annoys me more, is that the source of the vuln propagating upstream hasn't actually received any issues yet… which speaks volumes to me.