>> ● Require 2 factor auth for publish operations > This seems very reasonable, and the easiest to implement. It also has the nice effect of being a captcha to

>> ● Require 2 factor auth for publish operations > This seems very reasonable, and the easiest to implement. It also has the nice effect of being a captcha to the publish operation, which gives it some of the gravitas it deserves in an open ecosystem like npm. I agree, especially since Google Authenticator makes this pretty easy to implement.