I don't think the situation is very typical, so I don't why the response should be. There's two maintainers, one is on an "internet hiatus", the other is eithe

I don't think the situation is very typical, so I don't why the response should be. There's two maintainers, one is on an "internet hiatus", the other is either suspected of being the bad actor, or is otherwise so thoroughly compromised to destroy any short-term trust. I assume if homebrew had such an egregious issue, they'd have someone able to respond to it.