Back to article

We should all be using dependency cooldowns (opens in new tab) 7 articles covering this post

blog.yossarian.net··Lobsters, Hacker News, Hacker News, r/selfhosted·Open original

Covered in 7 articles

Vulnerability and malware checks in uv

astral.sh··Lobsters, Hacker News, Hacker News

Pip 26.1 Ships Dependency Cooldowns and Experimental Lockfile Support to Combat Supply Chain Attacks

infoq.com··Hacker News

Dependency cooldowns are unfair; we should use phased rollouts instead

illegalcode.net··Lobsters, Hacker News

Episode #296: Managing Polars Schema Issues & Profiling GitHub Users

realpython.com·

Your Dependency Graph Is a Liability You Haven’t Priced Yet

shippingbytes.com··Hacker News

Risky Bulletin: RubyGems adds dependency cooldowns to counter supply chain attacks

news.risky.biz·

In other languages

Пакетным менеджерам пора ввести период охлаждения