thepill·8개월 전·discussHow do you test your projects if there are any infected/affected dependencies used? As i understand it could also be a dependency of a dependency ... that could be affected?
thepill·9개월 전·discussI recently learned about https://garagehq.deuxfleurs.fr/ but i have no expirience using it
thepill·10개월 전·discussI understand the problem mentioned with mcp servers but this kind of attack could happen to any external dependency (like a smtp package) i guess
thepill·11개월 전·discussThe same thing that happend to grafana?https://grafana.com/blog/2025/05/15/grafana-security-update-...