Sorry, I was talking about esm.sh https://github.com/postui/esm.sh https://github.com/postui/esm.sh This is written in golang and can be self hosted. > This

Sorry, I was talking about esm.sh https://github.com/postui/esm.sh https://github.com/postui/esm.sh This is written in golang and can be self hosted. > This is good, but even with integrity hashes it makes me slightly uncomfortable to have a (relatively unknown) SaaS company stand between the original source on npm and us. I understand the worries but npm is a private SAAS company which was unknown at the time of node too. Things take time to sort out and become stable. Unlike node, where npm defaults to npmjs - a private company which can go anytime. Deno doesn't make that choice for users. I believe that is the right step. Trust what you need to and have an allow list.