The problem here is that NPM is a private company in an institutional role. You will always have some very common dependencies which, if brought down or altere

The problem here is that NPM is a private company in an institutional role. You will always have some very common dependencies which, if brought down or altered, could compromise a lot of projects. The problem is that npm has to act like an institution, not like a private company.