Post B7xlcwxM3TtLLB0C48 by lanodan@queer.hacktivis.me
 (DIR) More posts by lanodan@queer.hacktivis.me
 (DIR) Post #B7xk8p2qnyJkA7dvbk by mgorny@social.treehouse.systems
       1 likes, 0 repeats
       
       Dependency cooldowns are a nice idea, but I dare say they're a short-term solution.They resemble the idea of avoiding poison by waiting for someone else to start eating first. That works, provided that someone actually eats first, and that the poison works fast. But eventually it leads to that awkward silence at the table when nobody wants to risk the first bite.Adapting dependency cooldowns means basically waiting for "someone else" to notice the problem. At some point when large enough number of projects adapts them, we're going back to square one — except with an artificial few-day delay.#security #FreeSoftware
       
 (DIR) Post #B7xlcwxM3TtLLB0C48 by lanodan@queer.hacktivis.me
       0 likes, 0 repeats
       
       @mgorny For me it looks horribly irresponsible.At some point we need to have less of those layers-and-layers of putting away any sort of actual checks on dependencies, not adding on the pile.