News for hackers. Stuff that matters.
Re:Customize Python dependency resolution with machine learning by deycallmeajay on Thursday November 25, 2021 @03:20PM (#29344656)
Yeah this sounds like a terrible idea. The current goal is to build reproducible and hermetic builds. By adding more complexity it’ll be much more difficult to get the same artifact, build after build as well as give another method for attackers to achieve supply chain injections.

There are no comments on this comment yet.