Call me old-fashioned, but I don’t like the subheading. This is not “security issues”. It was possible, for years, for anyone to upload anything for any packa

Call me old-fashioned, but I don’t like the subheading. This is not “security issues”. It was possible, for years, for anyone to upload anything for any package. For a package manager, this is THE security issue, all caps.