If people are using number of installs as a safety metric, can't blackhats game that by having a bot install the package many times?
If people are using number of installs as a safety metric, can't blackhats game that by having a bot install the package many times?