Like I've been saying, npm is ripe for abuse https://medium.com/p/73fac4bc5068