01
Dependency Confusion: When Public Package Names Beat Private Repositories
Dependency confusion demonstrated that build tools could fetch a public package with the same name as a private internal dependency when registry precedence and version selection were misconfigured.
↗