3 ms·npmjs.org isn't a low-risk site. A weak password is putting users of your npm packages in danger.by obtu 15y agonpmjs.org isn't a low-risk site. A weak password is putting users of your npm packages in danger.