you are viewing a single comment's thread
view the rest of the comments
[–] 2 points 6 months ago

Packages are reviewed by package maintainers.

Humans are required to solve a malicious insider. But most supply chain vulns of these shitty software dependency managers were resolved decades ago by freely available cryptography

  • source
  • parent