Where did the packages come from? How did you know they hadn’t been changed at t... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

spooky_deep 11 months ago | parent | context | favorite | on: We shouldn't have needed lockfiles

Where did the packages come from? How did you know they hadn’t been changed at the bit-level since last time?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact