What if we could verify NPM packages?
hackernoon.com