That's silly. NPM's business relies on its thriving package ecosystem, and ecosystems like it face a very real risk from this problem. It would be in their inte

That's silly. NPM's business relies on its thriving package ecosystem, and ecosystems like it face a very real risk from this problem. It would be in their interest to provide such a service, and it would swiftly become obvious if any funny-business were going on, at which point their reputation would be completely decimated.