Hacker News new | ask | show | jobs
by pabs3 1791 days ago
Not recording exact dependency versions seems like the right way to stop those PRs from happening.