NPM should use The Update Framework (TUF) [1] and in-toto [2] in order to protect its users from attacks against the registry itself. A notable list of adoption

NPM should use The Update Framework (TUF) [1] and in-toto [2] in order to protect its users from attacks against the registry itself. A notable list of adoptions include: * Datadog is using both TUF and in-toto to defend against attacks between developers and end-users of its Agent integrations [3]. * Docker Content Trust is protecting users from a compromise of Docker Hub itself [4] using a version of TUF [5]. * Uptane is a version of TUF that is being standardized to protect software updates for automobiles [6]. * PyPI is considering adopting TUF to protect users of Python packages [7]. * Cloud Native Application Bundles is standardizing the use of TUF and in-toto to protect users of cloud-native applications [8]. Disclosure: I am a security engineer at Datadog, and am involved with both TUF and in-toto. [1] https://theupdateframework.com https://theupdateframework.com [2] https://in-toto.io https://in-toto.io [3] https://www.datadoghq.com/blog/engineering/secure-publication-of-datadog-agent-integrations-with-tuf-and-in-toto/ https://www.datadoghq.com/blog/engineering/secure-publicatio... [4] https://success.docker.com/article/docker-hub-user-notification https://success.docker.com/article/docker-hub-user-notificat... [5] https://blog.docker.com/2015/08/content-trust-docker-1-8/ https://blog.docker.com/2015/08/content-trust-docker-1-8/ [6] https://uptane.github.io/ https://uptane.github.io/ [7] https://github.com/pypa/warehouse/issues/5247 https://github.com/pypa/warehouse/issues/5247 [8] https://github.com/deislabs/cnab-spec/blob/master/300-CNAB-security.md https://github.com/deislabs/cnab-spec/blob/master/300-CNAB-s...