[nevir]

Or for publishing all packages

[consumer451]

I cannot think of a reasonable argument against this if security is any priority at all at NPM.