Are those points not the same for closed source products? "You don't know where ...

		syn0byte on Nov 26, 2018 \| parent \| context \| favorite \| on: Backdoor in event-stream library dependency Are those points not the same for closed source products? "You don't know where the code came from" and "your best indication if its safe is how popular it is."