3 ms·
1) surely there's a better way to draw attention to this kind of risk...right? 2) I admit they have my attention, but now what?
by rossdavidh 6y ago
1) surely there's a better way to draw attention to this kind of risk...right?
2) I admit they have my attention, but now what?
- warmwaffles 6y agoCauses development teams to update roles on who is allowed to do what and package signing.
- Isinlor 6y agoAdd namespaces? Block adding new packages that are not named "vendor-packagename" and ensure that only one entity can own a vendor name.