Catching malicious package releases using a transparency log | Hacker News Reader