People living on the latest packages with their dependabots never made any sense... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		rapfaria 4 months ago \| parent \| context \| favorite \| on: Shai-Hulud malware attack: Tinycolor and over 40 N... People living on the latest packages with their dependabots never made any sense to me, ADR. They trusted their system too much

LtWorf 4 months ago [–]

If you don't review the pinned versions, it makes no difference.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact