Sort of both. Technically just the original author can update the link, but right now if there's a collision there's no way to figure out which one to use. Easily fixable by adding the pubkey to the code, but yeah, very ruggable right now