@martinemmert Even a perfectly designed
library would not have prevented an attacker replacing it, because of the way
npm works right now.