Replies to message #2,515

  • 🏰 Deploying update to the Tatarus security page. If you encounter issues, post here.
Spasticus Autisticus

Open Source Software Community

To be fair it hasn't been all npm packages. log4j is probably the worst of all of them, although that was just shoddy work and not a malicious attack.
Polish Businessman

Open Source Software Community

Well, there kind of is. The earliest versions of NPM didn't provide a way to lock down versions of dependencies at all, you had to use external...
Back
Top Bottom