Hacker News new | ask | show | jobs
by mayama 39 days ago
you are betting that the package is popular, has enough eyes to mitigate attack in 7 days. attackers could also target unpopular packages for long game