[jbverschoor]

Doesn’t npmjs do things like signing, pinning, and yanking packages, like rubygems?

[paulddraper]

Yes