Strong_password Rubygem hijacked
We need a sort of capability and permission method for libraries.<p>For example a "strong_password" library should only by given "CPU compute" permissions, no I/O.<p>But even with this, the problem will be like we see on phone, popular libraries will require all the permissions.<p>You'll want to install React, and React + it's 100 dependencies will request everything.