Lockfile | HarrisonSec

Merged Is Not Shipped: Why a Year-Old Fix Never Reached You

August 22, 2026

dependencies supply-chain git-submodule lockfile release-engineering open-source software-delivery first-principles