당분간 새 소프트웨어를 설치하지 않는 게 좋을지도 모릅니다

The supply chain attack vulnerability in NPM reveals the paradox that frequent dependency updates increase rather than reduce the risk of malicious code injection. This is catalyzing a fundamental shift in development practices toward conservative dependency management and capability-based security models, challenging decades of 'always update' orthodoxy.