Back to article
blog.yossarian.net

We should all be using dependency cooldowns (opens in new tab)

Covered by 9 sources See all sources covering this story including Determinate Systems, astral.shDiscussed on Hacker News, Hacker News, Lobsters, and r/selfhosted

Covered in 9 articles

Determinate Systems·

Nixpkgs Cooldowns

Discussed on Hacker News
Feeds
astral.sh·

Vulnerability and malware checks in uv

Discussed on Hacker News, Hacker News, and Lobsters
Feeds
InfoQ·

Pip 26.1 Ships Dependency Cooldowns and Experimental Lockfile Support to Combat Supply Chain Attacks

Discussed on Hacker News
Feeds
illegalcode.net·

Dependency cooldowns are unfair; we should use phased rollouts instead

Discussed on Hacker News and Lobsters
Feeds
Real Python·

Episode #296: Managing Polars Schema Issues & Profiling GitHub Users

Feeds
shippingbytes.com·

Your Dependency Graph Is a Liability You Haven’t Priced Yet

Discussed on Hacker News
Feeds
Nemo's Home·

Package Managers need global hooks

Discussed on Hacker News
Feeds
news.risky.biz·

Risky Bulletin: RubyGems adds dependency cooldowns to counter supply chain attacks

Feeds

In other languages

habr.com·

Пакетным менеджерам пора ввести период охлаждения

Feeds

Keyboard Shortcuts

Navigation

Next / previous post
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Discover
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help