Show HN: Who can publish to your NPM dependencies? | Hacker News Reader