I mentioned this on HN the other day. It's getting to the point where you can't install any new software on your machine for worries about backdoors and malware inside the packge you install, or any deps it pulls in :(

https://news.ycombinator.com/item?id=49075417