Tag
package-managers
- Jul 27, 2026 Resolution as Constraint Search: Why Dependency Solving Is NP-Hard How a resolver chooses versions for a whole graph at once, why the general problem resists polynomial algorithms, and which practical strategies keep real graphs solvable. software engineering
- Dec 7, 2024 Dependency Confusion and the Order Registries Are Consulted When a build resolves a private package name against a public registry, an attacker can claim the name first. The mechanism is registry precedence, not a bug. security