Hacker News new | ask | show | jobs
by aoeusnth1 210 days ago
Your comment assumes that security issues are only discovered because someone downloads the package. This premise is incorrect.