Package managers have an integrity problem | Hacker News Reader