Every npm supply chain postmortem ends with the same advice: verify the package before you install it. So I looked at what the tools that do this actually check. Most of them check whether the package exists.

Source: [Dev.to](https://dev.to/tisankan/checking-whether-an-npm-package-exists-stopped-working-2j0e)

Sponsored