Remix.run Logo
Lermatroid 5 days ago

Dates make pinning easier than looking up a SHA

tfsh 5 days ago | parent | next [-]

Easier for humans to parse, but introduces the threat vector of malicious attackers modifying the history and force submitting malicious code at or before a pinned time. That's why lock files exist.

SHA is still the way to go for those who are security sensitive.

CGamesPlay 5 days ago | parent | prev [-]

Fair. If we're talking about documenting this feature, we should point out that SHA is immutable, while branches, tags, and dates are mutable references.