games for copilot live
| pronouns | she/it |
| website | https://mary.my.id |
| timezone | utc+7 |
mary 🐇
- 206 Followers
- 161 Following
- 221 Posts
waow
hey if anyone is spinning up an alternative npm registry let me know because this is a major PITA
I trust my own machines, but npm thinks otherwise and requires that I publish through GitHub CI, a service I don't trust
not even anything notable, I'm really surprised it hadn't gotten caught much earlier. like sure RSC doesn't have Facebook's oversight (some of the React team members wouldn't have moved to Vercel otherwise) but come on man why aren't there more people scrutinizing the wire format
10.0 CVE on React and it's literally just object prototype pollution that can be used for RCE, what are we doing man