If anyone wants to wrap the current build process inside Docker (or some other container) that would be awesome and would help with potential security issues. Right now we sort of trust that npm scripts won't do anything bad, but that's pretty bad from a security standpoint. Docker obviously isn't a security panacea, but it is at least better than what we have now.
If anyone wants to wrap the current build process inside Docker (or some other container) that would be awesome and would help with potential security issues. Right now we sort of trust that npm scripts won't do anything bad, but that's pretty bad from a security standpoint. Docker obviously isn't a security panacea, but it is at least better than what we have now.