On: Micropackages and Open Source Trust Scaling

[jessaustin]

Like git, npm does only what it is told to do. One writes one's own package.json file. Depending on a module one doesn't own is an action one takes oneself.