Composer: Downloading Random Code Is Not A Security Vulnerability? | Dark Hacker News