Principles for Package Repository Security | Hacker News Reader