News for hackers. Stuff that matters.
Re:Malicious code in the purescript NPM installer by dane-pgp on Sunday July 28, 2019 @04:13PM (#20549592)
Fortunately it seems to be something that Entropic gets right:

https://github.com/entropic-dev/entropic

If it ends up supporting PGP signatures for packages (ideally created by developers using air-gapped machines) then so much the better:

https://github.com/entropic-dev/entropic/issues/86#issuecomm...

There are no comments on this comment yet.