Package Managers -- Dependency Confusion

[cce]

There is an interesting blog today about how dependency confusion (when private packages are registered publicly) as a security challenge.

Dependency Confusion: How I Hacked Into Apple, Microsoft and Dozens of Other...

[dilumaluthge]

https://github.com/JuliaLang/Pkg.jl/issues/2393