> Always read the scripts you're going to run on your computer. I consider this harmful advice. You're promoting a false sense of security, which I think anyon

> Always read the scripts you're going to run on your computer. I consider this harmful advice. You're promoting a false sense of security, which I think anyone that's spent 10 minutes looking through an underhanded code contest can see. If your threat model includes the packages you're installing, then you need to do multi-person audits, sandboxing, etc. This applies to software obtained from package managers as well, which aren't typically pre-audited (and let's not forget popular packages that have been hijacked or acquired and injected with malicious code).