| ▲ | nicce 4 hours ago | |||||||
I thought that CLI would be efficent when I looked for using it and then I figured it is JavaScript | ||||||||
| ▲ | rvz 4 hours ago | parent [-] | |||||||
Exactly. That is the problem. There is a time and place for where it makes sense and a password manager CLI written in TypeScript importing hundreds of third-party packages is a direct red flag. It is a frequent occurrence. We have seen it happen with Axios which is one of the biggest supply chain attacks on the Javascript / Typescript ecosystem and it makes no sense to build sensitive tools with that. | ||||||||
| ||||||||