Fernando Alves fernandotakai

What if a package did something like this, but instead of logging to the console, they sent it back to a server?

Have you actually reviewed every dependency and every child dependency in every app you deploy?

Why are people not more scared of this?

	CmdUtils.CreateCommand({
	name: "tinyarrow",
	takes: {"url to shorten": noun_type_url},
	icon: "http://tinyarro.ws/favicon.ico",
	description: "Replaces the selected URL with a <a href=\"http://tinyarro.ws\">TinyArrow (➡.ws) URL</a>",
	execute: function( urlToShorten ) {
	//escaping urlToShorten will not create the right tinyurl
	var baseUrl = "http://tinyarro.ws/api-create.php?url=";
	jQuery.get( baseUrl + urlToShorten.text, function( tinyArrow ) {
	CmdUtils.setSelection( tinyArrow );