5 ms·
Stale libraries are a risk factor for publicly disclosed vulnerabilities (likely more exploitable than the underlying OS, since library code is closer to user i
by closeparen 6y ago
Stale libraries are a risk factor for publicly disclosed vulnerabilities (likely more exploitable than the underlying OS, since library code is closer to user input). Also for diamond dependency conflicts when you try to bring in or upgrade a different library.
- m_eiman 6y agoA better measure would be "(security) issues reported since the version you're using", I suppose.
- DEADBEEFC0FFEE 6y agoOnly if you think all the security issues have been found in all the libs. Lesser known libs can be riddled with vulns that nobody has found.