Comment Re:NPM needs to be burned to the ground (Score 1) 27
I've never seen a software distribution mechanism as careless and sloppy as NPM.
I've always been against running anything that requires NPM, because of exactly that.
Their repository governance is abysmal.
Compare that to, say, Debian/Ubuntu, and you see a huge difference.
Debian has been around for almost 3 decades, and we have not had the repositories being a vector for compromised software.
If it is NPM, I pass