On: What NPM should do to stop a new colors attack

[selfhoster11]

Protecting users from their dependencies should be the job of their language's standard library. With a good enough stdlib, the number of dependencies required is much lower.