Twitter Feed
@zkat__ ("kat marchán") replied to a tweet by @zkat__:
Seriously you're literally running arbitrary code.
Trying to add a bunch of configuration to whitelist packages you "trust" will only give you a false sense of security while massively increasing the complexity of maintaining your dependencies.
It's lose-lose.