DEV Community

Discussion on: Another Npm Package Is Highjacked and It's Your Fault That This Happened

sharpninja profile image
The Sharp Ninja

For one thing, there needs to be major consolidation of NPM packages. Currated meta-packages that would be maintained by a team of paid devs. Yes, you would have to pay to use the currated feed and packages, that's how you actually get enough quality eyeballs on the code to make it work.