Depends on what they're shipping. We're doing this with UI work, as long as your backend is secure I don't see what the issue is personally.

Generally engineers are not well placed to be building UIs.

andy_ppp 13 hours ago | parent | next [-]

Frontend has plenty of security considerations.

You are a npm import away from having big problems.

You're definitely doing something wrong if that's the case at your company.

sumeno 13 hours ago | parent | next [-]

Like letting non-technical teams ship production code

But the claude/cursor/kiro/codex said my code was production ready, enterprise grade, and PCI/alphabet soup compliant.

That is your problem right there. Instead of PCI compliance you needed that sweet, sweet IBM MCA compliance.

Rookie mistake by your AI; otherwise it did a flawless job, and the glaze it's been giving you is 100% accurate. You are the bestest.

If one more AI calls me "insightful" or says that my question "really cuts through the noise" or "gets to the heart of the matter"...

	▲	Saline9515 10 hours ago \| parent [-]
		You're totally right!

How did you solve supply chain security?