Another level of this dilemma:

• Pin all dependency versions – Prevents receiving security patches
• Don’t pin dependency versions – Enables supply chain attacks (see https://nesbitt.io/2026/02/03/incident-report-cve-2024-yikes.html)

That’s the security issue, right? Liar paradox detected!

Danish: // hold my beer

#define NINETY ((int) (4.5 * 20))

I know this one! https://superuser.com/a/577304/65414

Because of one smartass customer who insisted on doing exact RFC 822 validation, I implemented exactly that. And yes,

zKcknV|NGv.lI66vR#@X`QcRK4K.R`?NpA.Gc2Kqzue9.%&nb1kGWp/./#Och$RQv

is one of the test cases for a valid addr-spec. See (or generate) some others at https://github.com/mormegil-cz/rfcemailvalidator

Also, check if your PIN has been leaked as well! https://pastebin.com/Nn2ZcdfC