Skip to content

Conversation

gordonmessmer
Copy link

In order to ensure that users don't have long-lived security vulnerabilities in their applications, it would be very helpful to provide direct, specific guidance on updating indirect dependencies, which can otherwise remain versioned locked for long periods of time.

In order to ensure that users don't have long-lived security vulnerabilities in their applications, it would be very helpful to provide direct, specific guidance on updating indirect dependencies, which can otherwise remain versioned locked for long periods of time.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant