Web Security · Senior · Question 49 of 75
What is dependency confusion?
- 1A circular dependency between modules
- 2Two packages that export the same function name
- ✓Correct answer: A public package with the same name as an internal one gets installed instead, because the resolver prefers the public registry
Explanation
Use scoped packages tied to a private registry, configure the registry per scope, and pin versions in the lockfile.