I saw a great suggestion the other day - > The npm ecosystem needs something like the distinction between Ubuntu's "main" and "universe" repositories, so that

I saw a great suggestion the other day - > The npm ecosystem needs something like the distinction between Ubuntu's "main" and "universe" repositories, so that you have a smaller subset of known-good packages with harmonized transitive dependencies, stronger centralized curation, a lot more direct scrutiny, tighter control over versioning, and some party that is responsible for addressing vulnerabilities and ensuring appropriate maintainership. https://news.ycombinator.com/item?id=23680734 https://news.ycombinator.com/item?id=23680734