At least they're trying to manage it responsibly: > We’re going to have to remove inactive collaborators and enforce 2fa, because commit rights will effectivel

At least they're trying to manage it responsibly: > We’re going to have to remove inactive collaborators and enforce 2fa, because commit rights will effectively become npm publish rights.