3 ms·
it's interesting that staying up to date with your dependencies is considered a vulnerability in Node
by shortrounddev2 1y ago
it's interesting that staying up to date with your dependencies is considered a vulnerability in Node
- skwee357 1y agoPeople who live on the edge of updates always risk vulnerabilities and incompatibility issues. It’s not about node, but anything software related.
- bichiliad 1y agoHaving a cooldown is different from never updating. I don’t think waiting a few days is a bad security practice in any environment, node or otherwise.
- vrighter 1y agoBut only if most of everyone else doesn't do so.