-mlv
Joined 2 years ago
Karma
94
Submissions
44
Member since
Feb 12
Joined 2 years ago
This is depressing, I'd expect people at these events to be more informed and less ignorant than the general public.
Ideally the reports would also be coming in in the same structured format.
It's crazy that all it takes to become a maintainer of a package is to flag it as orphaned, wait 2 weeks for the original maintainer to fail to respond because they're on a holiday, and BAM! - the attacker can gets assigned as a maintainer and can now ship spicy updates.