Thousands of NPM accounts use email addresses with expired domains

Too bad that repo maintainers cannot PGP-sign their packages.<p>Repo ecosystem is only as strong as their weakest link.<p>¯\_(ツ)_&#x2F;¯