the main things are: 1. pin dependencies with sha signatures 2. mirror your depe... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

fernandotakai 4 months ago | parent | context | favorite | on: Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are com...

the main things are:

1. pin dependencies with sha signatures 2. mirror your dependencies 3. only update when truly necessary 4. at first, run everything in a sandbox.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact