> Nobody except me seems to see a problem there, despite me being able to point out specific security incidents. The npm model is a shitshow (multiple versions

> Nobody except me seems to see a problem there, despite me being able to point out specific security incidents. The npm model is a shitshow (multiple versions of one dependency). People defend it for obviously self-interested or lazy reasons.