Gathering weak npm credentials

Thanks, amazing. The entire ecosystem is basically broken. May take a look at other ecosystems like NuGet, etc.?