Are Composer and Packagist also vulnerable to package unpublishing and hijacking?reddit.com·2 pts·iofur·0