NPM is a Github company and when there was a relatively serious attack in Github Actions a while back there was also pretty much zero response from them. Githu

NPM is a Github company and when there was a relatively serious attack in Github Actions a while back there was also pretty much zero response from them. Github is SOC2 compliant, but that of course means nothing really.