News for hackers. Stuff that matters.

A comment on Malicious crossenv package on npm. Parent comment

Re:Malicious crossenv package on npm by DorothySim on Wednesday August 02, 2017 @07:30AM (#14909661)
> For example, IIRC NetBSD required new developers to meet with one or two existing developers in person to verify their identity. (Pretty much like a regular PGP WoT.)

Debian also requires OpenPGP keys and WoT for all developers.

[ Parent | on HN ]
Re:Malicious crossenv package on npm by KirinDave on Wednesday August 02, 2017 @02:11PM (#14913144)
What is WOT in this context? I thought Debian required that you register with them, not that there was some other trust threshold.
[ Parent | on HN ]