4 ms·
The entire article is about why this isn't the case.
by jedberg 1y ago
The entire article is about why this isn't the case.
- andix 1y agoIt suggests a way more ridiculous fix. As mentioned by other comments in detail (security patches for transient dependencies, multiple references to the same transient dependency).
- yawaramin 1y agoThe article and various comments in this same thread have explained why these are not real issues because the resolution process picks the version 'closest to root'.