News for hackers. Stuff that matters.
Re:Backdoor in event-stream library dependency by merb on Monday November 26, 2018 @06:33PM (#18537822)
actually when publishing to the biggest java package repository (sonatype) you NEED to sign your packages.

also you can't transfer ownership without giving away your domain or github account. But you can add others to also upload to your name, but if an accident occurs your liable, too.

There are no comments on this comment yet.