Apparently the director of the game studio ironmace is called SDF. what he did to upset all those people in the reviews though idk.

Grind the whole planet into dust and show me one particle of climate. There’s no such thing

Most of the supply chain vulnerabilities I’ve seen published and talked about lately have been trying to do things like exfiltrate keys/secrets from developers, including ci.

So of you’ve got a pr open with the vulnerable package update on it then you’ve goofed. Even potentially without merging if you’ve not got ci set up very securely, which is probably more common than we’d like to admit