npm under siege (what to do about it) (Friends) | The Changelog: Software Development, Open Source | Podwise