That's great until an attacker compromises the automatic update system and uses it as a vector.
I would wager that far more systems get exploited because they are out of date (sometimes woefully) than by poisoned package repos.
But, certainly do your own threat assessment and develop and implement whatever plan works for you.
That's what cooldowns are for
alt Hacker News
I would wager that far more systems get exploited because they are out of date (sometimes woefully) than by poisoned package repos.
But, certainly do your own threat assessment and develop and implement whatever plan works for you.