dev-cli
dev-cli copied to clipboard
Don't add defender exclusion by default
Adding exclusions to an anti-virus is opening the system to new attack vectors, especially when it's a guessable/well-known location which is user-writable.
Therefore, it should be possible (as a developer) to completely remove this option, or even better to remove it by default and add an explicit toggle to enable it with some note, that this is a potentially risky thing to do
Ref: https://github.com/oclif/dev-cli/blob/402e9cca2401175cfb7f5baf8468605c37cd236a/src/commands/pack/win.ts#L75-L77
cc @srlowe @pdcastro