lachlanjc’s Twitter Archive—№ 10,802

@NathanBLawrence This is true. Tbh though, I’ve never seen security issues that are genuinely problematic on projects that don’t have the resources to upgrade packages. On my small personal projects, none of those issues could actually be exploited, it’s just some deep dependency