The more dependencies your project has, the higher your risk of supply-chain attack is, and the less you're aware of what code is actually running.

My recommendation: Replace simple dependencies with your own versions.

https://securinglaravel.com/security-tip-replace-simple-dependencies/ #Laravel

Comments