just another day in the life of package managers that can't even secure their own damn dependencies https://www.reddit.com/user/lelanthran