#+HashtagPLUS#Hashtag the Web... #Tag your World!
Join

Menu

New post

#Cooldown

12 posts

Feed·
11 of 12 posts
When to Skip Your Gem Cooldown
📰
0Read More

When to Skip Your Gem Cooldown

DEV Community: ruby·christine·about 19 hours ago
#vuxCUAP5
#devtoruby#devto#dev#rails#cooldown

On November 4, Rails shipped fixes for 21 security advisories, and both apps I work on had a 14-day Bundler cooldown telling us to skip brand-new releases.…

15s
A 1-Day Cooldown Would Have Blocked 70% of 2026's Hijacked npm Releases. Against Typosquats, 7 Days Still Misses 45%
🖼️
0Read More

A 1-Day Cooldown Would Have Blocked 70% of 2026's Hijacked npm Releases. Against Typosquats, 7 Days Still Misses 45%

DEV Community: python·Kiell Tampubolon·7 days ago
#sLv0sbCQ
#devtopython#devto#dev#days#cooldown

I replayed 11,556 malicious npm and PyPI packages from 2026 against a dependency cooldown. Hijacks die fast, typosquats don't, and fixes pay the bill.

15s
Composer 2.11's Cooldown in a Laravel App: Safer Updates, Except When the Update Is the Security Fix
🖼️
0Read More

Composer 2.11's Cooldown in a Laravel App: Safer Updates, Except When the Update Is the Security Fix

DEV Community: laravel·Hafiz·9 days ago
#gQyjOual
#devtolaravel#devto#dev#cooldown#composer

Composer 2.11 cooldown holds back new package versions. I tried it in a Laravel 13 app: it withheld 13.39, downgraded 23 packages and blocked a security fix.

15s
GitHub's package firewall puts a policy check between your runners and npm
🖼️
0Read More

GitHub's package firewall puts a policy check between your runners and npm

DEV Community·Leo·20 days ago
#r9T4cTGb
#devcommunity#dev#install#github#firewall

GitHub has opened a package firewall in public preview for Enterprise Cloud customers. It sits between endpoints and upstream registries and checks npm metadata requests and downloads against enterprise policy before anything installs.

15s
GitHub's package firewall puts a policy check between your runners and npm
🖼️
0Read More

GitHub's package firewall puts a policy check between your runners and npm

DEV Community·Leo·20 days ago
#fHS6CcFj
#dev#install#github#firewall#cooldown

GitHub has opened a package firewall in public preview for Enterprise Cloud customers. It sits between endpoints and upstream registries and checks npm metadata requests and downloads against enterprise policy before anything installs.

15s
Cool down before you install: give new gems a few days to be vetted
📰
164Read More

Cool down before you install: give new gems a few days to be vetted

Hacker News·5 months ago
#rznE7nda
#cooldown#bundle#rubygems#version#article

Most supply-chain attacks against RubyGems exploit a narrow window: an account is compromised, a malicious version ships, and any bundle install in the minutes that follow resolves straight to it. ...

15s