Unfinished Work in Package Security | Dark Hacker News