+1 for docker auto-updates. Its articles like this from Wired, A Hacker Group Is Poisoning Open Source Code at an Unprecedented Scale, that unfortunately make requests like this almost necessary - very much appreciate all real devs and the dedication they impart!