3 ms·

This. Moreover, such typo-squatting attacks could easily be mitigated by using a private package registry.