Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

That's kind of standard at big companies. Even at a small scale, it is beneficial to mirror every external dependency.


The review part is the pain point far rather than the mirroring.


It is a pain point, but relevant for legal liability and tracking security concerns, else you quickly have wild west where it's unclear what kind of problems affect which team and how




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: