What is npm doing to protect the JavaScript ecosystem – and is it enough?

The blog post discusses npm's efforts to enhance the security of the JavaScript ecosystem amidst increasing supply chain attacks on package publishing. It questions whether these measures are adequate to counter the growing threats.