How security is handled by package maintainers | Hacker News Reader