package manager
4 stories and discussions about package manager, aggregated from every source we track.
1.
2.
A survey of sandbox usage across package manager clients.
3.
Public outcomes from two targeted CrossCheck follow-up waves: one owner-confirmed policy and self-implemented fix, four open PRs, three open intent questions, and two avoided contributions.
4.
Path traversal via a manifest field appeared in eight of ten package managers audited and thirty-three times in four months of everyone else’s advisories.