Don't give them ideas.

Let me take this opportunity to thank today's sponsor, Whatever dot org. Yadda yadda yadda.

.org is for the 90s.

we live .io era these days (sadly)

.io is already so yesteryear.

There is/was .ai for a bit but its less generic.

I promise to leave more high-value comments if you can get me a deal with Whatever.

"This dependency tree is sponsored by NordVPN. Staying safe online is an ever growing difficulty and you could be exploited by hackers. NordVPN allows you to change your IP address, making you harder to track, securing your privacy. Check out the link in the API docs to get 20% off for the first two months. Thanks NordVPN!"

It's not a new idea; npm had its run-in with ads a couple years back[0].

--

[0] - https://www.infoq.com/news/2019/08/npm-bans-package-ads/

`gh api --silent -X PUT user/starred/evil/pleasedont` seems like it'd work for many users who leave magic tokens in their $HOME...

I'm very much not a fan of ambient authorization.

That won't work because of CORSs, no?