4 ms·
I feel the need to mention, whenever leftpad comes up, that it's impossible for that incident to ever happen again. Packages can no longer be unpublished after
by brundolf 6y ago
I feel the need to mention, whenever leftpad comes up, that it's impossible for that incident to ever happen again. Packages can no longer be unpublished after a brief window (48 hours I think?), so if you lock to specific patch numbers your dependencies are effectively immutable
- wglb 6y agoHow you do reconcile this, then? https://medium.com/@alex.birsan/dependency-confusion-4a5d60fec610 https://medium.com/@alex.birsan/dependency-confusion-4a5d60f...