Comment Comment by rvz And absolutely pin, pin, pin, ALL your dependencies.If I see a package version dependency that looks like this: ^1.0.0 or even this: "*", then stop reading, pin it to a secure version immediately. parent rvz 5 months ago
If I see a package version dependency that looks like this: ^1.0.0 or even this: "*", then stop reading, pin it to a secure version immediately.