alt Hacker NewsIf you started your Node project yesterday, wouldn't that mean you'd get the fix later?
Replies
cluckindan • yesterday at 11:25 AM
Obviously you bypass the cooldown to fix critical issues.
If you started your Node project yesterday, wouldn't that mean you'd get the fix later?
Obviously you bypass the cooldown to fix critical issues.
no, because if you used dependency cooldown you wouldn't be using the latest version when you start your project, you would be using the one that is <cooldown period> days/versions old
edit: but if that's also compromised earlier... \o/