2 ms·presumably upstream signed commits and/or releases would prevent most nefarious stuffby someguydave 5y agopresumably upstream signed commits and/or releases would prevent most nefarious stuff