2 ms·
The dependencies weren't vendored, meaning their behavior can change at any time if a malicious actor gains control of that third-party repo. This is bad for s
by rpdillon 7mo ago
The dependencies weren't vendored, meaning their behavior can change at any time if a malicious actor gains control of that third-party repo.
This is bad for security.
- trimethylpurine 7mo agoYes, I agree. And it's sadly, as we can see, still fairly standard practice to ignore it.