Comment by paularmstrong
2 days ago
The code is literally right there for you. It doesn't matter what ecosystem or package manager. Someone could distribute the same thing anywhere — it's up to those pulling it in to actually start auditing what they're accepting.
No comments yet
Contribute on Hacker News ↗