People living on the latest packages with their dependabots never made any sense... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		rapfaria 18 days ago \| parent \| context \| favorite \| on: Shai-Hulud malware attack: Tinycolor and over 40 N... People living on the latest packages with their dependabots never made any sense to me, ADR. They trusted their system too much

LtWorf 18 days ago [–]

If you don't review the pinned versions, it makes no difference.

Consider applying for YC's Winter 2026 batch! Applications are open till Nov 10
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact