Thousands of NPM accounts use email addresses with expired domains

Too bad that repo maintainers cannot PGP-sign their packages.

Repo ecosystem is only as strong as their weakest link.

¯\_(ツ)_/¯