4 ms·
These weren't account take over issues like plagued npm the last little while. This is just a vanilla library that you hope someone adds as a dependency and you
by vlovich123 1y ago
These weren't account take over issues like plagued npm the last little while. This is just a vanilla library that you hope someone adds as a dependency and you attack the users of whoever runs the code. 2FA does nothing here.
- viraptor 1y agoI know, that's why the second paragraph. General, public repos can't solve this problem if they want to remain open to everyone. It's on the developers to deal with that side of the problem.