2 ms·

I may be thinking silly but wouldn't it be better if these dependency reliability issues were fixed by the platform that released the package? Are there any bar

by pictur 5y ago

I may be thinking silly but wouldn't it be better if these dependency reliability issues were fixed by the platform that released the package? Are there any barriers to publishing a malicious package via npm right now?