3 ms·
This still does nothing to prevent anyone from publishing a bad package, for example a compromised device/dev in the organization. A cooldown of a day, and may
by pixl97 3mo ago
This still does nothing to prevent anyone from publishing a bad package, for example a compromised device/dev in the organization.
A cooldown of a day, and maybe not updating on weekends will save you from that.
It's time to stop moving at the speed of stupid.
- vhcr 3mo agoA compromised device still can't access the secure enclave.
- pixl97 3mo agoIt doesn't need to, it just updates the code, you have the human publish.
- freakynit 3mo agoUpdates should be changed to delete + publish, and either should require OTP/MFA. You don't need artificial cooldown if you add a manual, informed action in-between. All these publishes went uninformed to their maintainers.. that's the issue.