Embed Notice

@functionalscript @nzakas

Now you're not referencing main/HEAD, but you also know exactly what you're getting. Build system can cache those values.

• You get to control the upgrade cycle for your dependencies
• You can roll back these upgrades
• You get an auditable trail of what's in Production
• You can run verification tools to ensure that the versions you use meet your security standards

Other people's repos don't come with warranties, so you need to build your own assurances... /3