> prefer the oldest version satisfying the given constraints The problem is ther... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

collinmanderson 8 months ago | parent | context | favorite | on: Shai-Hulud Returns: Over 300 NPM Packages Infected

> prefer the oldest version satisfying the given constraints

The problem is there's no metadata for which versions fix security bugs, and therefore which previous versions are now insecure.

Consider applying for YC's Fall 2026 batch! Applications are open till July 27.
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact