ShowHN: A brave new world where "npm install" ONLY installs secure packages | Hacker News Reader