3 ms·
It’s not 100% bullet proof, but it’s safer than pulling any random repos directly from the internet. It’s also good that your business doesn’t have to rely on
by ozzythecat 5y ago
It’s not 100% bullet proof, but it’s safer than pulling any random repos directly from the internet.
It’s also good that your business doesn’t have to rely on a third party every time you need to pull down your dependencies and build your software.
- DSingularity 5y agoProtects you against a dependency being hijacked and retroactively embedding malware in prior versions . Check summing would protect against that without the trouble of manually hosting the dependency.