Package managers have an integrity problem | Dark Hacker News