3 ms·
It almost doesn't matter, because you can get pwned by a transitive dependency. If someone doesn't have the same scruples as you have, you're still at risk.
by jadar 6mo ago
It almost doesn't matter, because you can get pwned by a transitive dependency. If someone doesn't have the same scruples as you have, you're still at risk.
- inbx0 6mo agominimumReleaseAge and lockfiles also pin down transitive dependencies.