4 ms·

This runs the risk of shipping C/C++ libraries with known vulnerabilities. How do you keep track of that? At least with npm / cargo / etc, updating dependencies

This runs the risk of shipping C/C++ libraries with known vulnerabilities. How do you keep track of that? At least with npm / cargo / etc, updating dependencies is a single command away.

dgfitz 1y ago
Pull, update, build?
- josephg 1y ago
  How do you even know a dependency has an open vulnerability?
  - dgfitz 1y ago
    Conversely, how do you know when a dependency doesn’t have a vulnerability?