Pinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks · HackerPapers discussionshttps://hackerpaper.kaipfister.de/p/2502.06662/Collected HN comments and submissions linking this paper.enMon, 02 Nov 2026 11:27:26 GMTPinning Is Futile: You Need More Than Local Dependency Versioning to Defend against Supply Chain Attacks — HN submissionhttps://news.ycombinator.com/item?id=46770913urn:hackerpapers:submission:2502.06662:46770913Mon, 26 Jan 2026 20:18:34 GMT<p>Pinning Is Futile</p><p></p><p>1 point; 0 discussion replies on HN. <a href="https://hackerpaper.kaipfister.de/p/2502.06662/">Paper and source history</a>. A submission is not an endorsement.</p>cs.SE