A wake-up call for security on third-party packagesmichaelhidalgo.medium.com2 points·atticusCr··1 commentOpen articleSaveView on HN