Package Management
1 article RSS
Ruby's Bundler Adds an Opt-In 'Cooldown' That Skips Gem Versions Until They Have Been Public for a Set Number of Days
Bundler 4.0.13's cooldown filter excludes brand-new gem versions from dependency resolution to blunt supply-chain attacks that exploit the minutes after a malicious release.
3 min read2 sources