/tags/dependencies/ Recent bookmarks tagged #dependencies Mon, 02 Nov 2026 08:24:56 +0000 https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns Dependency cooldowns are a free, easy, and incredibly effective way to mitigate the large majority of open source supply chain attacks. More individual projects should apply cooldowns (via tools like Dependabot and Renovate) to their dependencies, and packaging ecosystems should invest in first-class support for cooldowns directly in their package managers.<br/> <p><strong>Tags:</strong> #dependencies #dev #security</p> Fri, 21 Nov 2025 17:43:31 +0000 linkding-ssg:bookmark:38016 dependencies dev security