| ▲ | pabs3 a day ago | |
How many people actually audit the code changes in their dependencies when updating them? | ||
| ▲ | mmarian 21 hours ago | parent [-] | |
Few, if any. Which is why I'm highlighting that you can't just use commit SHA + Renovate then call it a day. | ||