Comment on GitHub - voidauth/voidauth: An Easy to Use and Self-Host Single Sign-On Provider 🐈⬛🔒
fluckx@lemmy.world 6 days agoI’m trying to wrap my head around your comment to understand. What exactly do you mean by supply chain sploit risk?
The tool is using 3rd party libraries and those libraries could be used to introduce vulnerabilities in the app?
lime_red@lemmy.world 5 days ago
This is the correct read.
This is also the same as any other software package in existence. In fact, if someone claimed to not use any libraries, I’d be taking a close look at that too.
The key difference is if you’re a paying a company for support and certification of the product as delivered, you can yell at them about it. If you’re using a free product with no support, you can yell at yourself.