3 ms·
How about smaller libraries, that might not have mailing lists? i.e. packages on pip, npm, or projects on GitHub that have made their way into your application?
by duck237 12y ago
How about smaller libraries, that might not have mailing lists? i.e. packages on pip, npm, or projects on GitHub that have made their way into your application?
- stevekemp 12y agoThats where oss-security, and similar lists tend to be useful. But to be honest once you've got an RSS to email/chat gateway you can subscribe to new releases and similar with ease. So you tend to find you're updated almost by accident.
- substack 12y agoFor node at least there's: https://twitter.com/nodesecurity https://twitter.com/nodesecurity http://nodesecurity.io/ http://nodesecurity.io/