This is not the first time this year we see an npm issue, and it could have been much worse than this. All package managers in general create risks, but how th

This is not the first time this year we see an npm issue, and it could have been much worse than this. All package managers in general create risks, but how the community etiquette evolves around package managers is just as important. Something is wrong with the latter here.