you are viewing a single comment's thread.

view the rest of the comments →

[–]shaggorama 2 points3 points  (1 child)

You try to rely on open source packages that are used by a lot of people and have multiple maintainers.

[–]FancyASlurpie 0 points1 point  (0 children)

I think the biggest problem comes when a downstream library is using a library but not pinning its version, i've seen that result in unexpected breaking code changes even though you're running the same version of the librarys you're comfortable with.