Which is something that can be fixed instantly: simply stop showing download counts on NPM.