releases
Remixware Now Fails Pull Requests That Bring In Risky Dependencies
A pull request that adds one line to package.json can add forty packages to the lockfile. Reviewers read the line. Hardly anyone reads the lockfile, and that’s …
Tag
Tag
releases
A pull request that adds one line to package.json can add forty packages to the lockfile. Reviewers read the line. Hardly anyone reads the lockfile, and that’s …