News for hackers. Stuff that matters.

A comment on Zed Editor automatically downloads binaries and NPM packages without consent. Parent comment

Re:Zed Editor automatically downloads binaries and NPM packa... by rfoo on Monday July 08, 2024 @08:21AM (#40904761)
Do you pin your plugins down to commit hash?
[ Parent | on HN ]
Re:Zed Editor automatically downloads binaries and NPM packa... by kmarc on Monday July 08, 2024 @11:45AM (#40906402)
I did in the past.

Now I just run `:PlugUpdate` and hope that whatever comes from GitHub, is seen by the manyeyeballs. I certainly don't check all the diffs.

[ Parent | on HN ]