aabbccsmith·2 か月前·議論The framing of this is far nicer/warmer/positive compared to OP's position of being "above" money. With that said, nonograph does look cool.
aabbccsmith·10 か月前·議論npm's recent provenance feature fixes this, and it's pretty easy to setup. It will seriously help prevent things like this from ever happening again, and I'm really glad that big packages are starting to use it.