4 ms·
Or package signing would help. Something NPM has continuously refused to implement because they believe it is difficult…
by yepthatsreality 5y ago
Or package signing would help. Something NPM has continuously refused to implement because they believe it is difficult…
- xeromal 5y agoMaybe I misunderstand what package signing is, but the actual owner of the code published the BS. He owns the keys to signing the packages as well.
- Tajnymag 5y agoHow would that help if these changes were pushed directly by the original creator himself? Not only form his account but himself as a person.