The weird dig at JS as a community is wholly unnecessary. Python as an ecosystem is just as vulnerable to this crap - and they’ve had their own issues with it.
You can reference that and leave the color commentary at the door.
You can reference that and leave the color commentary at the door.
Every ecosystem has this problem but NPM is the undisputed leader if you count all attacks.