Skip to content

Lockfiles

Named by 2 kept items in this workspace.

Search every workspace for Lockfiles. It matches the name as written, so it can find other things that share it.

The items that name it 2

  • Trail of Bits (@trailofbits) on X
    thread2026-10-16It is written here as Lockfiles: intended to make dependencies immutable, but often do not prevent a compromised repository from swapping in malicious code.
  • Trail of Bits (@trailofbits) on X
    thread2026-10-15It is written here as Lockfiles (pin dependencies; with a lockfile fewer than half of the tested package managers verified every download).

    pin dependencies; with a lockfile fewer than half of the tested package managers verified every download

All technologies in this workspace.