alt Hacker NewsAll those folks telling me to update my dependencies, this is why I don't do it. It's not laziness, it's undeniable foresight.
Replies
pixl97 • today at 2:50 PM
I mean, yes, update your dependencies. But probably after a week or so after they've been release and tested by the first penguins willing to jump into the ocean.
➕ show 1 reply
abbadadda • today at 2:38 PM
What purpose does “undeniable” serve here? This tips over into hyperbole, in my opinion, whereas “it’s foresight” is much simpler and stronger. YMMV.
➕ show 1 reply
rirze • today at 4:05 PM
There's a reasonable solution to this. Tools like `cargo-audit` can tell you if a crate has security issues and guide you towards an update. You don't have to blindly update all dependencies this way.
As long as your versions don't have any security issues...