[jjj123]

As someone who knows nothing about package signing and security, are you saying that Nix is about as secure as NPM?

[lrvick]

Correct, and that is not a good thing.