Today's supply chain poisoning incident by Axios has drawn significant attention to the industry, and OpenClaw also forcibly locked the versions of its dependent modules a little over an hour ago. To give everyone a more intuitive understanding of the risk, I compiled a dependency graph for OpenClaw's third-party modules: 1,246 third-party modules and 2,672 dependency paths. That's all… Of course, there might be some statistical bias; modules introduced by third-party Skills weren't included in the statistics. Locking dependency versions is a necessary security practice; otherwise, if any one of the 1,246 third-party modules were compromised, it could potentially destroy OpenClaw… Software engineering is never a simple matter; even the most powerful AI can make mistakes. Stay vigilant. If you're going to take risks, use independent devices to avoid being wiped out by a whole host of problems…
This article is machine translated
Show original

From Twitter
Disclaimer: The content above is only the author's opinion which does not represent any position of Followin, and is not intended as, and shall not be understood or construed as, investment advice from Followin.
Like
Add to Favorites
Comments
Share
Relevant content
