Hacker News new | ask | show | jobs
by madarco 25 days ago
meanwhile pnpm 10.x by default won't donwload packages younger than a day
2 comments
stabbles 25 days ago
Is one day enough to find vulnerabilities? Who keeps an eye on new releases? Otherwise the problem continues to exist, just delayed by one day.
link
captn3m0 25 days ago
There’s almost a dozen cybersecurity companies scanning NPM publishes in real-time and analysing them.
link
jamietanna 25 days ago
*11.x
link