Hacker News new | ask | show | jobs
by throwawayffffas 21 days ago
How often do you update your lockfiles? Where ever I have worked, it's once a year or whenever we get a critical CVE (in which case we only update the offending package and it's dependencies if required). Unless an attack is happening every day the chances of getting hit is slim.
1 comments

Exactly.