2 ms·

> Libraries off Github literally have the source available for you and the community at large to vet. If Github was compromised, it would be easy and obvious t

• filleduchaos 7y ago
  Which you can avoid by forking the mainline repo and depending on your fork. Images on Docker Hub don't even need to share their Dockerfile, to talk of all the source/etc that went into their build.
  • speedplane 7y ago
    >> If Github was compromised, it would be easy and obvious to insert malicious code in a repository > Which you can avoid by forking the mainline repo and depending on your fork. If github was compromised, the it would be pretty easy to generate forks with the same compromised code.