Commentary that downplays the compromise’s impact misses the point, the co-founder of Sonatype argues.

Disaster was averted after widely used open-source packages were compromised via social engineering.