New posts in Package Manager

Does python's pip provide cryptographic authentication and integrity validation?

What are the security implications of homebrew and macports?

Recent ESLint hack or how can we protect ourselves from installing malicious npm packages?