Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The script is just a cat or vim away from audit. Its dependencies on the other hand…


This was very confusing!

I meant it’s easy to inspect your script’s logic — look it. Bunch harder to audit the code in dependencies though…


A download and a cat away?


Sorry I was half asleep! Meant that you can easily look at the code in the script and audit what it does – you can just run `cat` in it and you’re done!

But it’s much harder to inspect what the imports are going to do and be sure they’re free of any unsavory behavior.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: