you are viewing a single comment's thread
view the rest of the comments
[–] 31 points 2 years ago (2 children)

Packages or dependencies with only one maintainer that are this popular have always been an issue, and not just a security one.

What happens when that person can't afford to or doesn't want to run the project anymore? What if they become malicious? What if they sell out? Etc.

  • source
  • parent
  • hideshow 2 child comments