Hacker News new | ask | show | jobs
NPM publish-time malware scanning and dual-use metadata (github.blog)
5 points by Bobaso 5 hours ago
2 comments

> a package may be published as […] held for manual review

Manual review by whom?

Microsoft owns NPM. Microsoft employee I guess ?