3 ms·
Upgrading could introduce vulnerabilities just as easily as fixing them.
by 20after4 5y ago
Upgrading could introduce vulnerabilities just as easily as fixing them.
- awill88 5y agoit’s possible, kind of a moot point as doing nothing induces a similar level of risk in my experience. Don’t touch your code for two weeks, I guarantee you that ‘npm audit’ will complain about some new issue.
- trog 5y agoAlso worth noting the longer you wait to upgrade, the harder it can be to do so when you finally need to. If someone discovers a critical fault in the version you're running but you're several years out of date, upgrading can be a huge pain.