Dependency supply chain

  • Choose
  • Lock 19

Difficulty 4 of 5

CI fetches 400 packages/s for builds. An attacker took over a popular package and published a poisoned version. From 0:20 to 0:40 the public registry is down. No unreviewed version may enter a build. Fetches must stay 99 percent available. Pick the dependency policy.

Play level

Options

  • Version ranges, newest wins
  • Pinned hashes, public registry
  • Pinned hashes, private mirror
A reader with no tools stops page ordersTap or press Space to add or remove the reader

Goals and limits

Throughput (Unreviewed)
none
Availability (Pinned)
at least 99%
p99 latency (Pinned)
under 1 s
Monthly cost
under 40 USD/mo
Traffic
400 req/s

Concepts

How players did

Player results load from the server.

All levels