Forking confusing: Vulnerable Rust crate exposes uv Python packager | Hacker News Reader