Hacker News Reader

You could still typosquat as e.g. @guyy/cross-env.

You would have to maintain that all package names are unique. The "cross-env" part would have to still be unique.

No that's not good. Do scope but don't make package names unique.