Re:We All Dodged a Bullet
by darthwalsh on Wednesday September 10, 2025 @11:40PM
(#45207523)
Yes, but the public npmjs repository also blocks our corporate IP addresses, so our CI/CD pipelines can't ruin npm for everybody else.
No bank, and almost no large corporations go directly to artifact/package repos. They all host them internally.