[danielcasper]

Okay, so what's the obvious solution to all this supply chain poisoning?

[turtleyacht]

Pin deps. Integrity hashing. Wait to update to latest. Mirror through a proxy. Adhere to code scanner guidelines (--ignore-scripts).