4 ms·
Well. Depends, if your package Version links to a commit hash, you should be rather secure. One could delete it but not overwrite it as easily.
by leipert 7y ago
Well. Depends, if your package Version links to a commit hash, you should be rather secure. One could delete it but not overwrite it as easily.
- icebraining 7y agoOne could presumably push a new version, linked to a commit that contained (directly or as an ascendant) some malicious code.