Using a lockfile and checking in your dependency tarballs [1] can help insulate you from these problems until you're ready to face them. I created shrinkpack b

Using a lockfile and checking in your dependency tarballs [1] can help insulate you from these problems until you're ready to face them. I created shrinkpack before left-pad and thankfully it meant that we were unaffected. A lot of developers, understandably, baulk at checking in dependencies, but there is a concrete benefit in being able to continue uninterrupted during outages. [1] https://github.com/JamieMason/shrinkpack https://github.com/JamieMason/shrinkpack