Hopefully, since 3rd-party JS libraries are visibly becoming a valid attack vector, companies are going to have to take their thumbs out and remove that vector from their attack surface.
So I hope more of this is going to happen, so that companies are pressured to put an end to the possibility once and for all.
Biting the hand that feeds IT
