ShowHN: A brave new world where "npm install" ONLY installs secure packages | Dark Hacker News