Package Manager Threat Model, Revisited | Hacker News Reader