Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other Companies
Ever since I started learning how to code, I have been fascinated by the level of trust we put in a simple command like this one: pip install package_nameSome programming languages, like Python, come with an easy, more or less official method of installing dependencies for your projects. These installers are usually tied to public code repositories where anyone can freely upload code packages for
Sprockets絶ちに挑戦した
RailsアプリケーションからSprocketsが受け持っている処理をNodeパッケージに移そうとした挑戦の記録です。joker1007さんの https://github.com/joker1007/rails_browserify_sample や https://speakerdeck.com/j…
1
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
処理を実行中です
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
Open Source Insights
Sonatype Nexus Repository | A Leading Artifact Repository
GitHub
Tidelift | Reduce security risk from bad open source packages
Dependency Update as a Service - Tachikoma.io
