Join the discussion
Write your take first — we'll ask for email only when you're ready to publish.
- Hacker News
- That's what happens when you vibe code.by raver1975
- so s/bookworm/trixie/g didn't work then?
Yes, this is mostly a joke, I am able to understand the difference between base distros.
by KaiserPro - I don't understand the 'custom patch' strategy over 'fix the app with a major version change' strategy.by iandanforth
- Why is the Node ecosystem like this? Why do people continue to choose it for popular projects vs. anything else?by evanjrowley
- I'm convinced you can tackle 5-10 "CVEs" a day, make a little dashboard, put some pretty graphs on it, and send it to your exec team and probably get accolades. Nevermind that the CVEs had nothing to do with your product.by aliasxneo
- If you're not a security person, the unspoken subtext here: the overwhelming majority of these "CVEs" do not matter to the project, and a very large number of them don't matter at all. They're pro-forma findings, like ReDOS in code paths that are rarely used, or, even more commonly, "prototype pollution" issues.by tptacek
- For those unfamiliar, “CVE” stands for “CV Enrichment”, common slang in Posture Engineeringby prymitive
- Pretty impressive to introduce 1400 CVEs in a project that's only ~7 months old.by halestock