Dealing with (Hypothetical) Sham Packages | Hacker News Reader