Why don't you google or follow the link I already gave? | Hacker News

Hacker News new | past | comments | ask | show | jobs | submit

login

KirinDave on Aug 1, 2017 | parent | context | favorite | on: Malicious crossenv package on npm

Why don't you google or follow the link I already gave?

danjoc on Aug 1, 2017 [–]

Exactly what I thought. You can't name one. Coincidentally, Maven central requires GPG signatures.

KirinDave on Aug 1, 2017 | [–]

As we all know you can only sign a piece of code if it is free of malicious software.

Heck, I read that you can't even make a GPG key without proving your virtue to Richard Stallman in festivus-style competition.

Join us for AI Startup School this June 16-17 in San Francisco!
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact