10May
What are other security risks associated with using package managers for internal companies libraries besides 3rd party trust
Assuming you have full trust in your package manager i.e. pip or npm (not to be compromised and leak your packages). And you have full trust in your developers to always install the correct packages.
i.e.
npm publish –access restricted
W…
