My solution does not fix the problem, it reduces it, so if we get all the missing STL functions in a trusted STL package then you as a web developer will have t

My solution does not fix the problem, it reduces it, so if we get all the missing STL functions in a trusted STL package then you as a web developer will have to review 200 less packages. But maybe some other luicky guys will have to review no package at all since most of what they need is in this STL-extra. You can come with other solutions to reduce the problem further, like some of the other ideas suggested, one of the ideas is to maybe make it less CV worthy to have a npm package to discourage the behavior we seen where someone creates or forks some package and then pushes it into other projects just for fame. I apologize if I miss-understood your point, honestly is not clear what you did not like about an optional STL library that is trusted and people could use instead of 100 untrusted leftpad like ones.