I stopped trusting curl | sh — so I built a tool that reads the script first

· Dev.to

Read full story at source