• @custard_swollower
    link
    218 hours ago

    …and then you learn that packageX v1 is not maintained anymore and relies through a deep set of dependencies on a seriously vulnerable package (in a version which is also not maintained anymore).

    Sorry, I had a pretty eventful December :)