GitHub: Our plan for a more secure NPM supply chain | Hacker News Reader