NPM package permissions – an idea | Hacker News Reader