Hacker News new | ask | show | jobs
by leni536 35 days ago
It honestly surprises me we don't hear news about vim/neovim plugin supply chain attacks.
2 comments

probably a much smaller dependency graph (lesser usage of transitive dependencies)