Warn users about similarly named packages

Open njlr opened this issue 8 years ago • 1 comments

If the user tries to install some-package and both some-package and some_package are available, we should warn the user. Fake packages are a potential security risk.

Feb 14 '17 15:02 njlr

Under the new model it's not clear how this could be implemented - we don't know the full universe of packages until resolve time.

Oct 29 '19 22:10 njlr