News for hackers. Stuff that matters.

A comment on What NPM should do to stop a new colors attack. Parent comment

Re:What NPM should do to stop a new colors attack by jonny_eh on Monday January 10, 2022 @05:42PM (#29883951)
What if NPM allowed a "global minimum version" for any package found to have critical security vulnerability?
[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by johannes1234321 on Monday January 10, 2022 @05:48PM (#29884038)
global for what? How much tracking of issues do I have to make? In an ideal world (which we can't have for multiple reasons) I get security fixes by default. (and no other breakage)
[ Parent | on HN ]