GitHub pulls pin on NPM's auto-run scripts | Hacker News Reader