How much do we know about how packages behave on the NPM registry? | Hacker News Reader