Hacker News new | ask | show | jobs
by clbrmbr 45 days ago
Wouldn’t you prefer to pin to SHA hashes? Or does your package manager cloud-side ensure immutability of releases?