Well, which is it more probable to to go unnoticed: a hack of the install script you fetch via http or an entire github commit infesting the software while it s

Well, which is it more probable to to go unnoticed: a hack of the install script you fetch via http or an entire github commit infesting the software while it still lets it work as designed so no contributor notices? It is not a problem with mojolicious at all. Its a nice helper that should be carefully used.