GitHub, which owns the npm registry for JavaScript packages, says it is tightening security in response to recent attacks.
Software development chaos stems less from flawed processes & more from a lack of visibility into priorities, dependencies, ...