Analyze the security of npm packages
P粉550323338
2023-08-15 13:45:16
<p>Is there a way to verify the security of npm packages? I'm working on a project that requires CSV file processing and discovered the Papa Parse package (https://www.papaparse.com/). Before continuing, I want to make sure it's safe. Any insight would be greatly appreciated. </p>
<p>I don’t know how to verify whether a package is safe</p>
![[Web front-end] Node.js quick start](https://img.php.cn/upload/course/000/000/067/662b5d34ba7c0227.png)
No.
Something is not "safe" or "unsafe" without understanding the context of use and user expectations.
The NPM package manager does a decent job of finding known vulnerabilities, but of course it cannot be relied upon entirely.
You need to review the code yourself, or trust the opinion of others (such as a company that audits code).