nsfmc’s Twitter Archive—№ 6,785

durumcrustulum i recall somebody (not github) also doing a paid nsp-style "upload your package.json for periodic audits" i always wondered where the threshold was, how they did the analysis, wasn't clear to me