Sure, but there are points in the design space between “everyone specifies exact...

		kristjansson on Jan 11, 2022 \| parent \| context \| favorite \| on: What NPM should do to stop a new colors attack Sure, but there are points in the design space between “everyone specifies exact version requirements” and “everyone specifies lower bounds and pulls the absolute latest”.