NPM packages: they ain’t free, you know · HackerTrans