Hacker News Reader

Why doesn’t this happen with GitHub? GitHub also has very good domain authority.

Rate limiting, spam filters, easy ways to report, 2FA requirements, etc.

Many package managers are on this path too.

GitHub probably has a team working on the spam problem. Doesn’t look like anyone cares at NPM.