Let's talk about solutions. I'm late to the conversation here, responded on Twitter and went to sleep. There's a push to address the npm audit situation. It's

Let's talk about solutions. I'm late to the conversation here, responded on Twitter and went to sleep. There's a push to address the npm audit situation. It's an initiative under the OpenJS Foundation. I kinda started the whole conversation by implementing a tool that makes it acceptable instead of ditching npm audit. It's called npm-audit-resolver and I've written about it here https://dev.to/naugtur/do-you-need-help-with-your-npm-audit-3olf https://dev.to/naugtur/do-you-need-help-with-your-npm-audit-... Also check out the collab space and the tool itself https://github.com/openjs-foundation/pkg-vuln-collab-space https://github.com/openjs-foundation/pkg-vuln-collab-space https://www.npmjs.com/package/npm-audit-resolver https://www.npmjs.com/package/npm-audit-resolver