Are Composer and Packagist also vulnerable to package unpublishing and hijacking?

Be the first to share your thoughts.