Comment by jojobas

I wonder how many widely used github projects rely on cryptic "random small packages from a pull request" that possibly introduce backdoors.