They are forced to care when their employer does. Hence why many companies force... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

pjmlp on Oct 14, 2023 | parent | context | favorite | on: Making Rust supply chain attacks harder with Cackl...

They are forced to care when their employer does.

Hence why many companies force internal repos on CI/CD, and dependencies only uploaded after legal clearance.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact