On Fri, Nov 8, 2013 at 9:42 AM, Ian Stakenvicius <a...@gentoo.org> wrote: > I'm still a little concerned about the potential security issues > caused by embedded V8's in projects, but as we've already concluded in > that other thread, there's no other way until the API stabilizes..
Yup. When a project uses a library with an unstable API, they're basically taking on a commitment to fork it unless upstream backports all fixes. If the alternative is re-implementing the library the project is no worse off (at least with embedded libs we know about the vulnerabilities). If there are other alternatives, then they should probably rethink their strategy. Rich
