> Absolutely anyone can create code, put it online and then have others use it fast.
And after 2 years remove or change it in a malicious way and break thousands of other packages and projects. Because it's absolutely anyone.
And after 2 years remove or change it in a malicious way and break thousands of other packages and projects. Because it's absolutely anyone.
Though saying other open source software is secure due to a higher barrier to entry feels like security by obscurity. Particularly since that higher barrier is often not higher because it's insisted on being high quality tested code, but just because it involves greater complexity in actually submitting it to be distributed.