Comment by bikeshaving

I’m curious. What’s the risk of a supply chain attack? What are the privileges of a VIM plugin?