undefined | Better HN

0 pointseudox10y ago0 comments

How do you determine what is a suspicious package without reviewing every new package by hand?

0 comments

1 comments · 1 top-level

You could base it off edit distance with all the other packages. If the distance is too close, then it needs manual approval.

j / k navigate · click thread line to collapse