5 ms·
just pin your code to specific versions, the package manager, build tools and linter can just give warnings and case study examples about why the warnings are r
by vmception 5y ago
just pin your code to specific versions, the package manager, build tools and linter can just give warnings and case study examples about why the warnings are relevant
- teach 5y agoAnd then in five years there's a log4j vuln and you've got to figure out how to upgrade a bunch of (potentially incompatible) versions to get a fix. It's a different approach, with pros and cons. Personally I think the npm model has more downsides than other approaches, but it's not clearly always the wrong approach.