3 ms·

I think first thing would be to remove wildcards from version specs and lock them to your known, tested versions. Then only do upgrades after some time of stab

by ugh123 5y ago

I think first thing would be to remove wildcards from version specs and lock them to your known, tested versions. Then only do upgrades after some time of stability in the ecosystem (i'd wait months, not days, for that)

kevinsundar 5y ago
Waiting months means you don't get security fixes for months.
- userbinator 5y ago
  It's known knowns vs unknown unknowns. I'd much rather have the former.