Clone the repo and ask your llm of choice to audit any security risks

edoceo 6 hours ago | parent | next [-]

After that I run them in containers, no network access, ro filesystem.

computator 6 hours ago | parent | prev | next [-]

And then build from source. And make sure it doesn't auto-update so no new malware gets in. This is my idea of a lot of extra work.

	▲	itsdesmond 5 hours ago \| parent \| next [-]
		Why even ask the question?
	▲	applfanboysbgon 6 hours ago \| parent \| prev [-]
		Building from source is nowadays writing one sentence in a chat box. Your idea of extra work is either unbelievably lazy or perhaps outdated by a few years.

Eduard 6 hours ago | parent | prev [-]

good luck auditing all transitive dependencies