News for hackers. Stuff that matters.

A comment on Best practices to keep your projects secure on GitHub. Parent comment

Re:Best practices to keep your projects secure on GitHub by zie on Thursday April 28, 2022 @01:58PM (#31195834)
One argument, if the vulnerabilities don't affect you for whatever reason, it probably doesn't matter much. Lots of vulns these days have a fair load of caveats attached, and if they don't apply, one could argue upgrading is not required.

Note: I'm not taking a stance on if I agree or not with this argument.

[ Parent | on HN ]
Re:Best practices to keep your projects secure on GitHub by mbesto on Thursday April 28, 2022 @04:41PM (#31197950)
Fair. But do most companies know whether the 638 child dependencies on <insert JS library here> affect them or not?
[ Parent | on HN ]
Re:Best practices to keep your projects secure on GitHub by zie on Thursday April 28, 2022 @04:50PM (#31198037)
LOL! only 638? That might be low :)
[ Parent | on HN ]