4 ms·

So would I see this message if it was pulled in a script, by npm, go install, cargo or another such tool? But this article describes RepoJacking as reclaiming

by tgv 3y ago

So would I see this message if it was pulled in a script, by npm, go install, cargo or another such tool? But this article describes RepoJacking as reclaiming the original repo. The alias is removed, and the warning you mention too.

lol768 3y ago
> So would I see this message if it was pulled in a script, by npm, go install, cargo or another such tool? The repository maintainers would, every single time they updated the code. For your own scripts, you'd see a 301 Moved Permanently response when e.g. fetching a source code ZIP. It's up to you as to whether you want to follow this redirect silently or print a warning.