NPM registry sets stage for more secure package publishing · HackerTrans