gbransgrove

17 ms·

1. 1.▲
   by gbransgrove 11mo ago

   Because these are fetching dependencies in the lifecycle hooks, even if they are legitimate at the moment there is no guarantee that it will stay that way. The owner of those dependencies could get compromised, or themselves be malicious, o
2. 2.▲
   by gbransgrove 11mo ago

   Okay, I just have one main question and a follow up. Who is at the wheel of your tech and engineering strategy then? And is staying across everything to make good informed decisions in that space not enough to be a full time job by itself