> But... (maybe I'm reading this wrong) what, exactly, is problematic with NPM? I think the problem is that people should not (except in rare circumstances) be

> But... (maybe I'm reading this wrong) what, exactly, is problematic with NPM? I think the problem is that people should not (except in rare circumstances) be able to just remove packages. They should be immutable and have versions associated with them so that your builds are reproducible. Sure I think that in some cases you should be able to have them removed like if there is a security vulnerability or something but I don't think some guy being upset should be sufficient.