Bus-factor leaderboard

If a maintainer’s npm account were compromised, how much of your stack is downstream of something they publish? Ranked by number of your projects that transitively depend on at least one package they maintain.