Hacker News new | ask | show | jobs
by josteink 2237 days ago
Because you’re downloading lots of untrustable source from npm and friends when you are fetching your dependencies.