you are viewing a single comment's thread
view the rest of the comments
[+] 7 points 6 months ago (1 child)
  • [–] 2 points 6 months ago

    Packages are reviewed by package maintainers.

    Humans are required to solve a malicious insider. But most supply chain vulns of these shitty software dependency managers were resolved decades ago by freely available cryptography

  • source
  • parent