Hacker News new | ask | show | jobs
by vimax 1570 days ago
That and an aggressive auto update with lax version constraints for transitive dependencies leads to frequently downloading untrusted code.