3 ms·
> A fraction and based on my old Ruby gems memories, fairly out of date That's almost certainly true, but the case of having to choose, I'd almost always selec
by logifail 4y ago
> A fraction and based on my old Ruby gems memories, fairly out of date
That's almost certainly true, but the case of having to choose, I'd almost always select slightly older but trusted code to less trustworthy bleeding-edge-newness.
I guess that's why I'm content with dozens of instances running Debian.
- pcl 4y agoOlder dependencies, of course, might contain security vulnerabilities that have been patched in more recent version updates. Its a frustrating choice: stay on old versions and risk exposure to old vulns, or stay up-to-date and risk supply chain attacks.
- goodpoint 4y agoNo, it's the very opposite. Vulnerabilities can be discovered in released software, but new vulnerabilities are only introduced in new releases. Security fixes are backported by the distro. Over time, stable distributions become and remain more secure than cutting edge software.