Waylon Walker

πŸ’­ Package Managers Need to Cool Down

Waylon Walker avatar
Author
1 min read
Copy this post
Package Managers Need to Cool Down
Today's LiteLLM supply chain attack inspired me to revisit the idea of dependency cooldowns, the practice of only installing updated dependencies once they've been out in the wild for a …
Simon Willison’s Weblog Β· simonwillison.net

2026, finding the balance between fixed bugs and zero days. There is very unlikely ever a reason you need to be running bleeding edge packages in prod most package managers now support cool downs.

Note

This post is a thought. It’s a short note that I make about someone else’s content online #thoughts