3 ms·
No kidding. That’s bad enough news to warrant flagging any release by users not currently authorized to its respective package. At least internally for further
by eyelidlessness 5y ago
No kidding. That’s bad enough news to warrant flagging any release by users not currently authorized to its respective package. At least internally for further analysis, but probably also for maintainers and users to at least have an opportunity to do their own threat assessment.