baldur@toot.cafe ("Baldur Bjarnason") wrote:
For example, anybody who truly believed that React had fundamental security issues wouldn't also be churning out open source projects designed to make it easier for people to use React, tools that helped newbies adopt it, or libraries that extended it and consequently its attack surface.
No, they'd be focused on solving the security issues, especially if they were keen on using it in their own work.