I have to disagree. The very first line in https://www.spj.org/ethicscode.asp is "verify information before releasing it." Disclosing that there is only one source is a first step, but an insufficient one. And the tone of the article, from the headline onward, reports not only that "a source said X" but presents "X" as factual. That's simply not a credible practice.
you're suggesting that the ethics code requires you to state how many sources you verified with, and the number Hersh reported is too small a number. (you're going to deny you suggested that, but just keep reading, there's a point here)
I suggest that the ethics code says don't report facts as facts that you haven't verified as facts, but if you say "I could not verified this and I heard it from one source" you are within the code. "Sources in the Administration" often report things to reporters, and most of what they say can't be verified, it can only be echoed by more than one person. And if a reporter has a relationship with one leaker who has been reliable, you're claiming they can't use that, and I'm claiming they can and do. Sure, verify what you can, but being an honest reporter is what is required, not certain fact patterns.
Yes, in a deep dive publication like the New Yorker, they will often kill certain facts or an entire story if it cannot be corroborated, but that doesn't define journalism.
It's not fair to compare anyone else to "the world’s leading news publication, offering highly acclaimed, universally revered coverage of breaking national, international, and local news events ... maintaining a towering standard of excellence to which the rest of the industry aspires"