Remix.run Logo
tomesco 2 hours ago

https://news.ycombinator.com/item?id=47773812

ievans an hour ago | parent [-]

Top comment has a great explicit refutation:

> This plan works by letting software supply chain companies find security issues in new releases. Many security companies have automated scanners for popular and less popular libraries, with manual triggers for those libraries which are not in the top N.