TheRealBrianF

6 ms·

1. 1.▲
   by TheRealBrianF 1y ago

   I think you're obliquely referring to me there. I covered some of this in one of my previous blogs where i talked about the systemic challenges here that I've uncovered. The heavy users that I spoke to, 100% of them had a reposito
2. 2.▲
   by TheRealBrianF 2y ago

   You're referring to what I described previously here... ironically back when the first dependency confusion research was published: https://www.sonatype.com/blog/why-namespacing-matters-in-pub...
3. 3.▲
   by TheRealBrianF 5y ago

   Sonatype Lifecycle is designed to analyze a built package and figure out what's inside it, specifically when there aren't manifest files to tell you what's -supposed- to be there. It can obviously do a lot more, but the analy