From what I heard on the nodeup podcast, many corporate node users are eschewing all modules they did not develop themselves, hosting their own internal package

From what I heard on the nodeup podcast, many corporate node users are eschewing all modules they did not develop themselves, hosting their own internal package managers and rewriting libraries in order to avoid unvetted 3rd party code. It seems like this is the market that NPM premium is after. The question is will businesses be more comfortable using a premium service? In other words - someone they can sue? EDIT: It think it was the security episode, if I recall correctly.