Todd Sundsted

i predict there will be a day in 2026, in the npm ecosystem, in which it will be impossible to simultaneously update a package to fix a critical zero day without also downloading a required transitive dependency that introduces another...