Comment on You too can run malware from NPM (I mean without consequences)Comments−4ndrewl1yIf you're not vendoring, there's an argument to say that some portion of your source code is fair game to anyone who has commit rights to a variety of repos.
Comments
If you're not vendoring, there's an argument to say that some portion of your source code is fair game to anyone who has commit rights to a variety of repos.