Hacker News Reader

Is it a terrible idea? Yes. Do I do it anyway? Yes. Do I do it with non-mainstream projects I've never heard of? Nope. Does that make it ok? No, of course not, but that's the level of risk I'm willing to accept.

It's not really any different than downloading and installing/executing something like Sublime Text or Alfred.

View on HN

Amen to that. Everybody boasts about open-source and security but in the end, we just can't just check up every single line of code we get from the internet. There is a line of security people are willing to give up: piping RVM install to shell is okay. Downloading a binary from a shady site just to get a youtube downloader, nope.

Reply on news.ycombinator.com