The Node.js Ecosystem Is Chaotic and Insecure

It seems like only yesterday we had the “left-pad” fiasco where Azer Koçulu ended up pulling his packages after a name dispute.