You still need to build package and install it yourself though or else you are trusting someone else. Open Source software has been used as a vector for attacks before by bad actors getting access to the build system or source code.
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments