Not Particularly Mortifying: IEEE eggheads probe npm registry, say JavaScript libs not as insecure as feared The Register

Oh sure, there are plenty of flaws in those packages though not even one in ten are anything to worry about For the past few years, the security of JavaScript software packages available through the Node Package Manager, or npm, has been the subject of skepticism as a result of blunders, brouhahas, and tepid countermeasures.…

External feed Read More at the Source: https://go.theregister.com/feed/www.theregister.com/2020/09/25/npm_security_risks/