@lior
Went looking for an open source screen recorder. Found four repos with the same name, same logo, same README.
Original: archived by its author. A 165 star fork now holds the name. The 21k star fork announced its lead dev is unreachable and told everyone to install binaries from two accounts nobody has vetted.
I was one click from giving one of them screen + mic access, and the only thing telling me it was safe was a star count.
Stars are a like button. Not provenance.
Now I check codesign and notarization first.
What's on your list?
0 reply
1 recast
5 reactions