4 ms·
"you'd still have to contend with the transitive dependencies written by smaller organizations or individual contributors" - generally these are the higher risk
by collinmanderson 4y ago
"you'd still have to contend with the transitive dependencies written by smaller organizations or individual contributors" - generally these are the higher risk dependencies anyway and should probably be used with extra caution anyway.