One of the w3c devs I follow acted on the npm policies repo which I hadn’t seen before. Thought this might be interesting as much attention has been given to GH data collection but not as much npm itself. Not having dug too deep into it, nothing too nefarious stands out but it’s something potentially to watch.
Payment data? Come on!
There’s a long melodramatic npm story that involves payment data but the short of it is that before microsoft bought it, it was having severe financial and cultural strain. They brought in a very unpopular CEO to turn the ship around and his plan was to start charging for use, moreso at the enterprise level. Then microsoft came in and I’m not sure what became of premium npm.