|
|
|
|
|
|
by megavolcano
2230 days ago
|
|
|
What about the dependencies of your dependencies? You're gonna get burned when a breaking change gets introduced a few levels deeper than your package.json. Not everyone follows semver perfectly, and sometimes malicious code gets distributed as one of these transitive dependencies. |
|
|