Yup. I am doing some dependency analysis, so as to identify weak points for our business, e.g. DRP and so on. So far, the creakiest points we identified are G

Yup. I am doing some dependency analysis, so as to identify weak points for our business, e.g. DRP and so on. So far, the creakiest points we identified are Github and NPM. Github makes judgments on what is good and what is not, so they may shut down my dependency. Not good. NPM is the same. Any random person amongst the 5,000 dependencies can withdraw their approval, and kill my dependency. Not good. So I will recommend just removing both. Github ->> Just host your own Git NPM ->> Yarn or whoever understands "stability"