Hacker News Reader

I use Pi, but I think its updates and its extensions' updates are the biggest security gap I have right now. I'm not even sure what they keep updating TBH.

Any recommendations?

View on HN

Put it in a container with a build step and lock down versions. That's what I did. Then you can choose what to update, audit code, etc.

Whatever agent will be more than capable of wiring that up.

Reply on news.ycombinator.com