datenarsch·5年前·讨论Well other package managers don't automatically update packages like NPM does though but pin the exact version that you installed.
datenarsch·5年前·讨论It's his project. It's your fault if you blindly trust random 3rd-party code on the internet and have your mission-critical software depend on it.
datenarsch·5年前·讨论Because Google is not interested in serving the best possible search results but rather in serving those that will make them the most money.