GitHub moves to tighten npm security amid phishing, malware plague

GitHub, which owns the npm registry for JavaScript packages, says it is tightening security in response to recent attacks.
The Register on MSN

RubyGems maintainer quits after Ruby Central takes control of project

Long-time contributor Ellen Dash steps down after GitHub access shake-up and governance dispute A decade-long RubyGems ...