Hacker News Reader

Nothing about this attack would be solved by namespacing, but it might have been solved by maven's use of GPG keys.

isn't time NPM start to use that? Why has this taken soo long?