jefflembeck’s Twitter Archive—№ 20,680

Vikram_Tiwari npmjs Scoped packages have the ability to be private, so a user goes through the same authentication chain. We used to allow bad tokens to access public packages, but have stopped doing that.