Strong_password Rubygem hijacked
We need a sort of capability and permission method for libraries.For example a "strong_password" library should only by given "CPU compute" permissions, no I/O.But even with this, the problem will be like we see on phone, popular libraries will require all the permissions.You'll want to install React, and React + it's 100 dependencies will request everything.