Rely on distro maintainers for package security, not developers | Hacker News Reader