registry-monitoring

Monitoring Package Maintainer Changes as a Threat Signal

Most package hijacks start with a maintainer change nobody was watching. Registry metadata makes these events observable — if you bother to look.