npm Is Fighting the Right War With the Wrong Weapons

npm’s long-awaited v12 won’t close the gaps that matter most: account takeover, native builds, or detection of malicious intent at publish time. Closing those gaps is squarely on Microsoft. Threat…