4 ms·

Dependency Confusion Attack – What, Why, and How?

• stephenr 6y ago
  It's kind of crazy that "vendor your dependencies, and review changes to them as with other code" is not even mentioned in the "Conclusion & Recommendations" section.