4 ms·

I don’t recall hearing about constant supply chain attacks with CPAN

• bleuarff 1y ago
  Because it's never been considered an interesting target, compared to npm's reach?
  • user3939382 1y ago
    For a while CPAN was a very big deal and those packages were probably on just about every corporate network on Earth.
• AdamN 1y ago
  That was a different era. The velocity of change is 100x now and the expectation for public libraries to do common things is 100x higher as well.
  • Sophira 1y ago
    Perl and CPAN are still a thing, much as people would like to think otherwise.