> < 10% had useful 2FA enabled. I expect this to change. NPM will roll out mandatory MFA for the most-downloaded packages[0] (RubyGems as well[1]). I expect th

> < 10% had useful 2FA enabled. I expect this to change. NPM will roll out mandatory MFA for the most-downloaded packages[0] (RubyGems as well[1]). I expect this will rise to a 100% requirement at some point because Github's decision to require MFA by the end of 2023 will massively raise the waterline of folks who have the capability to MFA and experience with MFA. [0] https://github.blog/2021-11-15-githubs-commitment-to-npm-ecosystem-security/ https://github.blog/2021-11-15-githubs-commitment-to-npm-eco... [1] https://github.com/rubygems/rfcs/issues/35 https://github.com/rubygems/rfcs/issues/35