alt Hacker NewsNo it doesn't have security implications.
If you are insecure because someone has had one of their otherwise completely innocent PRs merged into your repo... you are insecure, period.
Replies
stavros • yesterday at 4:36 PM
Security isn't a binary "secure/insecure". You can be more or less secure than something.
What you are describing is exactly a security implication.