> It does not burden a system to have it.
any file format you support poses a significant attack surface, especially an old and creaky one whose parser you've written in the 90ies and ever touched.
any file format you support poses a significant attack surface, especially an old and creaky one whose parser you've written in the 90ies and ever touched.
and yet the trend is to use more and more libraries, sometimes from dubious sources and sometimes (hello npm) with malware.