We should all be using dependency cooldowns

Re:We should all be using dependency cooldowns by m000 on Saturday November 22, 2025 @08:42AM (#46014732)

Isn't the title kind of self-conflicting? Dependency cooldowns work because not everybody is using them. The more people start using dependency cooldowns, the less effective they become.

[ Parent | on HN ]

Re:We should all be using dependency cooldowns by macintux on Saturday November 22, 2025 @08:57AM (#46014842)

There are comments elsewhere in the discussion indicating that these attacks tend to be discovered by automated scanners and the maintainers themselves, not by customers negatively impacted.

[ Parent | on HN ]

Re:We should all be using dependency cooldowns by teaganga on Saturday November 22, 2025 @09:10AM (#46014933)

i had the same thing in mind, though, is not that part of the process until the release of available? should not the release already have the maintainers input?

[ Parent | on HN ]