[dingdingdang]

But Vivaldi == "We use JavaScript and React to create the user interface with the help of Node.js and a long list of NPM modules. Vivaldi is the web built with the web.". Which again equals: do I really want to trust that browser knowing how NPM modules are basically the least secure thing ever?

[RubyPinch]

a) that wouldn't affect a build, assuming they cache their packages, which they probably would since that event

b) didn't they change their unpublishing policy after that event?