A story of exploiting Android through releasing packages with the same name and ID on public repositories: https://blog.autsoft.hu/a-confusing-dependency/
miniblog.
Related Posts
When adding a new language to difftastic, it's hard to find interesting git repositories to test against.
I've started just querying GitHub for the most starred repos for a given language. For example, here's Haskell: https://github.com/search?l=&o=desc&q=stars%3A%3E500+language%3AHaskell&s=stars&type=Repositories
Git repositories have the lovely properties that deletes aren't propagated. Shared/cloud storage sync deletes across devices.
Accidentally deleting content in a local git repo, and even pushing it, is a safe operation.
I used to think repositories with multiple packages were a niche feature (cargo workspaces in Rust, Lerna in JS), but they're really valuable for the ecosystem.
Large projects will naturally develop mature, reusable code. Making it easy to release their helpers is worthwhile.