HNGlance

Top Best New Show

Am I supposed to ignore these vulnerabilities?

https://github.com/jgthms/bulma/issues/3609

by dt3ft • 3 years ago

1 2 3 years ago

GI

Related Stories

Loading related stories...

Comments

2

dt3ft• 3 years ago

I'm not the author of that GH issue, but I do wonder if we can do better.

Do you all look away when you see a bunch of warnings about minor vulnerabilities in your codebase?

KMnO4• 3 years ago

NPM audit is largely useless[0]. Most people don’t care that the CSS minifier can cause an out-of-memory when fed a bad class name, because that step happens during the build process and not with untrusted code. There isn’t a way to isolate only issues that can be exploited in the production code.

[0] https://overreacted.io/npm-audit-broken-by-design/

Source preview

github.com

HNGlance

© 2024-2026 HN Glance. Story content belongs to its original sources.

Privacy
Terms