How we protected ourselves from the Dependency Confusion attack | Hacker News Reader