Twitter Feed
buried in this announcement is the absolutely crazy revelation that until 2 weeks ago, anyone could have published an update to any npm package. https://github.blog/2021-11-15-githubs-commitment-to-npm-ecosystem-security/ (HT @feross)
Twitter Feed