logoalt Hacker News

robinhoodexe • today at 3:30 PM • 2 replies • view on HN

We have 7d cooldown on packages on an internal pypi proxy but that blocks security updates also, which we now have to manually exclude from the cooldown.

I’m unsure how to automate this properly, maybe an LLM is the best starting point.


Replies

mbrumlow • today at 3:58 PM

Are security updates immune ?

➕ show 4 replies
trollbridge • today at 4:14 PM

Problem is, we leave ourselves open for LLM injection attacks.