Hacker News
new
|
past
|
comments
|
ask
|
show
|
jobs
|
submit
login
LelouBil
4 months ago
|
parent
|
context
|
favorite
| on:
Postmortem: TanStack NPM supply-chain compromise
I feel like GitHub should deprecate it and replace it with pull_request_untrusted or something and have every shareable aspect (like cache or secrets) an explicit boolean opt-in
Consider applying for YC's Winter 2027 batch!
Applications
are open till November 2.
Guidelines
|
FAQ
|
Lists
|
API
|
Security
|
Legal
|
Apply to YC
|
Contact
Search:
