logoalt Hacker News

woeiruatoday at 4:31 AM4 repliesview on HN

Supply chain attacks are so scary that I think most companies are going to use agents to hard fork their own versions of a lot of these core libraries instead. It wasn’t practical before. It’s definitely much more doable today.


Replies

silverwindtoday at 11:49 AM

Even better would be to not use so many libs. Most use cases will do fine with native `fetch`.

pglevytoday at 7:07 AM

I was thinking about this as a bull case for human developers. Seems if you're worried enough to do this you're not going to have LLMs write the new code.

cryptonymtoday at 8:46 AM

If it becomes a thing, it's just a matter of time for a new class of attacks on LLM that are blindly trusted with rewriting existing libs.

show 1 reply
Levitatingtoday at 9:27 AM

Or just lock to a specific version?

show 1 reply