https://en.wikipedia.org/wiki/XZ_Utils_backdoor
that's example of attack reproducible packages do not protect from, why you are linking it ?
https://news.ycombinator.com/item?id=48083768
that's example of attack reproducible packages do not protect from, why you are linking it ?