Pirate Praveen on Nostr: npub1p6g0t…20242 So you get security update for any bundled dependency only when ...

npub1p6g0t7l57wwzn2q8sjc9hu99na47nswcp7p4ffg2g5a335h30v8q520242 (npub1p6g…0242) So you get security update for any bundled dependency only when gitlab updates that dependency in the bundle. In our case, when these dependency updates are shared across 1000+ #Debian Developers and any security update we make for a #gitlab dependency is also benefiting everyone else. Basically these are two different approaches. What Gitlab Inc provides is an approach that puts each project as the center, whereas our approach puts an entire distribution at the center.