41,554 blogs · 5,197,919 posts Claim your blog

Record · corpus.blog/posts/01a0878a-6e79-72e2-b9c0-ed758d42b1b4

When Package Dependencies Become Problematic

jamesiv.es · published 13 February 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at jamesiv.es Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 13
Words captured: 1,472

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://www.theverge.com/2022/1/9/22874949/developer-corrupts-open-source-libraries-projects-affected

theverge.com

https://www.npmjs.com/

npmjs.com

https://docs.npmjs.com/cli/v8/configuring-npm/package-json

docs.npmjs.com

https://semver.npmjs.com/

semver.npmjs.com

https://semver.org/

semver.org

https://docs.npmjs.com/about-semantic-versioning

docs.npmjs.com

https://github.com/features/actions

github.com

https://www.jenkins.io/

jenkins.io

https://www.jenkins.io/doc/tutorials/build-a-node-js-and-react-app-with-npm/

jenkins.io

https://docs.npmjs.com/cli/ci.html/

docs.npmjs.com

https://docs.github.com/en/actions/creating-actions/releasing-and-maintaining-actions

docs.github.com

https://docs.github.com/en/code-security/supply-chain-security/keeping-your-dependencies-updated-automatically/configuration-options-for-dependency-updates

docs.github.com

https://github.com/dependabot/dependabot-script

github.com