Also, how many people copy/paste commands on the terminal that don’t understand without thinking about it? And do you review all the build scripts of software b

Also, how many people copy/paste commands on the terminal that don’t understand without thinking about it? And do you review all the build scripts of software built from source? Let alone the proprietary driver that you install, who knows what they contain… Really npm is not that much of a deal. The problem is more for CI machines that can get compromised but for workstations… they are already insecure