3 ms·
Maybe one approach would be to pin all dependencies, and not use any new version of a package until it reaches a certain age. That would hopefully be enough tim
by johtso 1y ago
Maybe one approach would be to pin all dependencies, and not use any new version of a package until it reaches a certain age. That would hopefully be enough time for any issues to be discovered?
- rapfaria 1y agoPeople living on the latest packages with their dependabots never made any sense to me, ADR. They trusted their system too much
- LtWorf 1y agoIf you don't review the pinned versions, it makes no difference.
- pfych 1y agoPackages can still be updated, even if pinned. If a dependency of a dependency is not pinned - it can still be updated.