Comment by worik

>The reality here is that just grabbing and running random shit on clients or servers has _always_ been unsafe

That is what this whole catastrophic mess has been based on from day one.

Do not use NPM for anything new. Let it die a natural death.