Worrying about the NPM Ecosystem  (sambleckley.com)