Post #2873577

The thing about securing npm is that it's incredibly expensive to do. Socket does it for money. If Microsoft tried to charge for securing npm they would be criticized for not doing it for free so instead they just... don't do it, leading to our current mess.