3 ms·
Lock files are not enough, you can't review all the dependencies yourself every time you lock. A new tool is needed to deal with trust.
by remram 5y ago
Lock files are not enough, you can't review all the dependencies yourself every time you lock. A new tool is needed to deal with trust.