Echo JS 0.11.0

NPM registry vulnerable to "manifest confusion" abuse

at www.theregister.com

1 up and 0 down, posted by feross 544 days ago 1 comment

Unfortunately, npm is entrenched, best long term options are to enhance and expand npm proper.