logoalt Hacker News

factotvm • today at 5:38 AM • 0 replies • view on HN

I love that this is open source, thank you. I'm not a fan of TypeScript on Node for this solution space. For a payment gateway, I'd want a program that can't modify itself from external sources. Programs in this runtime can rewrite themselves while running, and the Dockerfile doesn't lock it down. So as it stands, nothing at the runtime level prevents prototype pollution. And a config defect is the kind of bug that keeps on giving.