Post #2745092

From 2020: "GitHub will also integrate npm to improve the security of the open source software supply chain, and enable you to trace a change from a GitHub pull request to the npm package version that fixed it" https://tfir.io/microsoft-acquires-another-open-source-company-github-to-buy-npm-inc/ How's that working out? https://blog.cyberdesserts.com/npm-security-vulnerabilities/ This stuff is hard when you *only* have the backing of an entire industry and a company as large as Microsoft behind it.