polyfill.io concerns

[gapmiss]

I've noticed (via Little Snitch firewall) that Livecodes will sometimes load javascript from pollyfill.io and recently saw this tweet from @wesbos.

Also: https://github.com/polyfillpolyfill/polyfill-service/issues/2834

Is this the same polyfill that Livecodes uses? I did a search for pollyfill.io and found the script tag.

livecodes/src/livecodes/html/app.html

Line 198 in 367fa25

<script src="https://polyfill.io/v3/polyfill.min.js" crossorigin="anonymous"></script>

Thank you

[gapmiss]

More… New options for Polyfill.io users

[hatemhosny]

Thank you @gapmiss for raising this.

I have also found that Cloudflare has published a fork
https://blog.cloudflare.com/polyfill-io-now-available-on-cdnjs-reduce-your-supply-chain-risk

This might be more suitable for LiveCodes since it is already hosted on Cloudflare