On: Polyfill supply chain attack hits 100K+ sites

[skydhash]

That’s why businesses pay Redhat, Qt, Unity,… Clear contracts that reduces the risk of compromised dependencies. Or you vet your dependencies (it helps when you don’t have a lot)