3 ms·
Of course, I can get malware in both ways, so recommended way is to trust a third party, a maintainer, which will review code, and then will create signed packa
by v_lisivka 8y ago
Of course, I can get malware in both ways, so recommended way is to trust a third party, a maintainer, which will review code, and then will create signed package.
- acdha 8y agoRight, so rather than talking about curl | bash it would really be better to talk about your review process since, for example, the same concerns apply if you do something like "npm install" without vetting every dependency.