undefined | Better HN

0 pointspabs31mo ago0 comments

Better to treat it as a dependency still, but audit each new commit/release as it comes in, and pin to the exact last commit id that you verified.

0 comments

1 comments · 1 top-level

Yes, but no one audits new dependencies versions usually. Only Release Notes mostly.

j / k navigate · click thread line to collapse