ParentFull threadjojobas·I wonder how many widely used github projects rely on cryptic "random small packages from a pull request" that possibly introduce backdoors.View on HN