How AI is applied across API Evangelist and APIs.io. Read my AI disclosure →
API Evangelist API Evangelist
Discovery
Learnings
Guidance
Toolbox
Alignment
API Evangelist LLC

Dependency prefixes are a supply chain risk: let's fix them

calendar_today May 22, 2026 person Justin Dorfman domain sourcegraph

Dependency prefixes like ^ and ~ make updates easy, but the version ranges they create widen the path a compromised package can take into production.

open_in_new Read original post