Hacker News Reader

From a security standpoint, how did NPM become a thing? Bar none, it feels like the most compromisable system short of SCADA.

A small Javascript standard library and more demand for packages with the use cases from running it server-side seem to be contributing factors.