Comment by 1oooqooq

having worked with both mvn and gradle, i always have a good chuckle when i hear about npm "supply chain" hacks.