this post was submitted on 25 Nov 2025
21 points (95.7% liked)

Web Development

4786 readers
48 users here now

Welcome to the web development community! This is a place to post, discuss, get help about, etc. anything related to web development

What is web development?

Web development is the process of creating websites or web applications

Rules/Guidelines

Related Communities

Wormhole

Some webdev blogsNot sure what to post in here? Want some web development related things to read?

Heres a couple blogs that have web development related content

CreditsIcon base by Delapouite under CC BY 3.0 with modifications to add a gradient

founded 2 years ago
MODERATORS
top 5 comments
sorted by: hot top controversial new old
[–] Vincent@feddit.nl 12 points 23 hours ago (1 children)

No no no, I should be using dependency cooldowns. You all should be finding the vulnerabilities and getting them fixed before they reach me.

[–] BlackEco@lemmy.blackeco.com 3 points 18 hours ago (1 children)

I don't get your point. In most examples cited in the article, the supply chain attacks were found either by security researchers or maintainers realizing they did not intentionally push compromised version, not by everyday developers. The goal of dependency cooldowns is to give researchers and maintainers more time to detect attacks before they reach end-users.

[–] Vincent@feddit.nl 4 points 17 hours ago* (last edited 17 hours ago)

It's a joke, not a real point, don't worry.

[–] Jayjader@jlai.lu 6 points 22 hours ago (1 children)

If we all use them, won't attackers switch to waiting an extra week before attempting to activate their attacks? This feels similar to antibiotics resistance in bacteria coming from over use of antibiotics.

[–] BlackEco@lemmy.blackeco.com 2 points 18 hours ago* (last edited 18 hours ago)

Yes they could, but most importantly it gives more time for researchers and maintainers to detect attacks and fix them before they reach end-users.