NPM Has Become a Russian Roulette | Not Hacker News!