Considering all the issues with "supply chain" attacks (sneaking malware code into libraries & such that many, MANY open source apps rely upon - I've no idea if that's the case here), I tend to prefer waiting until the code's been vetted, or at least out there long enough to minimize chances of infiltration. I know it's still no guarantee, but it's at least mildly safer.
1 Comments
SanctimoniousApe@lemmings.world · 4 pts · 1y
Considering all the issues with "supply chain" attacks (sneaking malware code into libraries & such that many, MANY open source apps rely upon - I've no idea if that's the case here), I tend to prefer waiting until the code's been vetted, or at least out there long enough to minimize chances of infiltration. I know it's still no guarantee, but it's at least mildly safer.