Dependencies are a huge supply chain security risk; the more of them you have, and the more often you update, the bigger the attack surface.
  • renegadespork@lemmy.jelliefrontier.netEnglish
    2·
    7 days ago

    you’re advocating updating without checking,

    Uh… no. That’s not what I said. I said there’s risk in both updating and not updating. You need to do the assessment to decide which one is best for the situation.