Haha really? https://mail.python.org/pipermail/security-announce/2017-Sep...
It’s the Wild West out there. And then there’s NPM...