Yeah like npm! Don’t think there’s ever been security issues in that.