Post
Topic
Board Exchanges
Merits 1 from 1 user
Re: eXch - instant exchange BTC / LN / XMR / LTC / ETH / ERC20
by
bitmover
on 19/04/2025, 11:17:13 UTC
⭐ Merited by JayJuanGee (1)
I'm someone with a major in Finances but lately I discovered that I love coding and web development. I'm learning JS and I was thought about learning NodeJS too. Can you tell me what's wrong with projects that are written in NodeJS?

Node is notorious for installing nested packages as dependencies of other packages which are themselves dependencies of your packages.

This has enabled people to hack the repository of one of those hacked packages and then install malware on thousands of computers even though it's not used directly by many packages, but it certainly is pulled indirectly to a lot of them.


I will also add that NodeJs, just like js, has several cryptography failures, which is very complicated for a cryptocurrency wallet project.

There is a big list of vulnerabilities here and how to mitigate them
https://www.cobalt.io/blog/node-js-vulnerabilities

I think Nodejs is a good language and tool that gets the job done. But not fit for the standards required by eXch.