evilpacket··on Compromising the integrity of the npm registryCouchdb has an open ticket on this very issue, which is part of the problem. The other part is the fact that they have really nonsensical configuration defaults.https://issues.apache.org/jira/browse/COUCHDB-1060