I just published a crates.io package under the name difft because I tried installing difftastic using that name and would rather have a benign typo-squat instead of a malicious one. Of course, I'm ready to transfer ownership; I just wanted to claim it before it was too late. I could have confided my concern to you privately and directly, but I also wanted to use this as a learning experience :)
This issue is to discuss what you would prefer to do with this typo-squat
set up alias publishing
have a fake package that errors and redirects user to install correct package
I just published a crates.io package under the name
difftbecause I tried installing difftastic using that name and would rather have a benign typo-squat instead of a malicious one. Of course, I'm ready to transfer ownership; I just wanted to claim it before it was too late. I could have confided my concern to you privately and directly, but I also wanted to use this as a learning experience :)This issue is to discuss what you would prefer to do with this typo-squat
Let me know your thoughts.