Sure! My point is that hosting doesn’t really matter, though. Malware and vulnerabilities are introduced at all points of supply chains.

• PyPi
• npm
• Maven Central
• Docker Hub
• Artifact Hub
• PPA
• AUR

The problem isn’t specific to anything. It’s also not specific to malware. Vulnerabilities are just as dangerous, if not more so.

watabou continues to be my favorite developer ever

They could call it “sparkling deportation” /s

Thanks for the suggestion. I am interested in nix, but haven’t explored it yet.