cool, so now the developer that did this will just thoughtlessly type npm publish npm instead. At the end of the day, there's only so much you can do. Really,

cool, so now the developer that did this will just thoughtlessly type npm publish npm instead. At the end of the day, there's only so much you can do. Really, a hammer shouldn't have a prompt on it confirming each hit. If it does, users will just instinctively press it and then a few months down the road they'll hit their thumb.