Conversation

Notices

1. Embed this notice
   daniel:// stenberg:// (bagder@mastodon.social)'s status on Sunday, 02-Mar-2025 23:07:54 JST daniel:// stenberg://

   Today is also two years since "the nuget story" where I struggled to get a ten year old and vulnerable #curl version delisted:

   https://daniel.haxx.se/blog/2023/03/02/the-curl-nuget-story/

   • Peter Krefting repeated this.
   • Embed this notice
     Patrick Schmitz (schmitzel76@mstdn.social)'s status on Sunday, 02-Mar-2025 23:07:54 JST Patrick Schmitz

     in reply to

     @bagder sadly this is an issue with all those package repositories, not just nuget. You have to be careful what packages you use, and also monitor whether they actually get updated when needed.