It always worries me when I install a well-known or large package from npm and i...

fha on Sept 15, 2017 | parent | context | favorite | on: Malicious software libraries found in PyPI posing ...

It always worries me when I install a well-known or large package from npm and it ends up downloading dozens of dependencies maintained by disparate and unaccountable github users.