I Am Forking Spectral

On July 14th someone filed an issue on the Spectral repository titled “SUPPLY CHAIN ATTACK — @stoplight/spectral pulls in compromised dependencies.” Ten days later, one other person commented on it: “Has anything been done about this? I see that a new release has been made, but did that fix this issue?” Nobody answered. The issue is still open as I write this.