3 ms·
Who really audits every single dependency in their dependency tree? not so much a rogue developer, but most.
by caspervonb 8y ago
Who really audits every single dependency in their dependency tree? not so much a rogue developer, but most.
- xfer 8y agoIf you are hobby programming, then not really, but in most workplaces, dependencies are usually pinned and not updated until necessary(bug fixes mostly).
- caspervonb 8y agoFrom what I've seen as a contractor usually there is no package-lock at all.