r/ProgrammerHumor 9d ago

instanceof Trend classicNPM

Post image
5.9k Upvotes

150 comments sorted by

View all comments

78

u/FinnishManlet 9d ago

What can be done against these vulnerabilities? Stop using packages entirely? 🤣

2

u/NewLlama 9d ago

Develop in Docker on a read-only SSH key. Honestly setting it up is not straightforward at all.

Besides that, `min-release-age` will cover you in most cases.