> So it is misleading to say it is secure and that security is built in. Well, it is a PR blogpost with literally that goal of wording most basic and boring th

> So it is misleading to say it is secure and that security is built in. Well, it is a PR blogpost with literally that goal of wording most basic and boring things in a way that sounds maximally sensational and groundbreaking without becoming a lie. Example: see how they comment on performance improvement. Instead of "compared to previous major relase, npm 5" it says "compared to 1 year ago".