Or in predictable locations. API keys as well. There's a ton of room for abuse. Case: many Node native libraries are blocked off on NPM and issue warning messa

Or in predictable locations. API keys as well. There's a ton of room for abuse. Case: many Node native libraries are blocked off on NPM and issue warning messages if you try to install them via `npm install ...` — you will also find that there are a few closely-named packages to many popular ones in the hopes people will pull them down.