News for hackers. Stuff that matters.

A comment on What NPM should do to stop a new colors attack. Parent comment

Re:What NPM should do to stop a new colors attack by bogeholm on Monday January 10, 2022 @06:14PM (#29884430)
Well, in a log4j situation or similar, I am sure there are cases where it is preferred to update first, and fix production later.

So that would be “get the one from 5 minutes ago, no questions asked”

[ Parent | on HN ]
Re:What NPM should do to stop a new colors attack by MattPalmer1086 on Monday January 10, 2022 @07:13PM (#29885145)
Nothing stops you from updating to the latest version and not testing it if it's urgent.

You just specify the latest version. But you do it explicitly.

[ Parent | on HN ]