Having a cooldown is different from never updating. I don’t think waiting a few ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		bichiliad 48 days ago \| parent \| context \| favorite \| on: Shai-Hulud Returns: Over 300 NPM Packages Infected Having a cooldown is different from never updating. I don’t think waiting a few days is a bad security practice in any environment, node or otherwise.

vrighter 48 days ago [–]

But only if most of everyone else doesn't do so.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact