reading this list i think security is slowly turning into part of the product … · @Aiyafun · TwKit

@Aiyafun

reading this list i think security is slowly turning into part of the product rather than something you bolt on later, and even as an indie dev shipping a small app i probably need to keep a closer eye on which dependencies i pull in, where my keys live and what my ci is actually allowed to touch. for anyone running a small project, what's the first thing you check when a package you rely on shows up in a list like this?

曝光 14 · 评论 0 · 点赞 0 · 书签 0