3 ms·
Hopefully increased awareness of insecure dependencies among users will increase reporting of them to dependant projects, which will encourage some or all of th
by Flenser 8y ago
Hopefully increased awareness of insecure dependencies among users will increase reporting of them to dependant projects, which will encourage some or all of the following behaviours:
1) projects to keep their dependencies up-to-date
2) projects to use less dependencies
3) consuming projects to switch their dependencies to ones that do the above
4) users to switch to projects that do the above
It would be interesting to track the average number of dependencies (total number in dependencies in the graph) over time to see how it is changing.