I'd encourage everyone to try the npm fund command (https://docs.npmjs.com/cli/v7/commands/npm-fund https://docs.npmjs.com/cli/v7/commands/npm-fund) on their re

I'd encourage everyone to try the npm fund command (https://docs.npmjs.com/cli/v7/commands/npm-fund https://docs.npmjs.com/cli/v7/commands/npm-fund) on their repos to see how many projects need funding. All of these projects are an opportunity for a malicious actor to offer a lump sum of money to get the package.