> Lucky no-one is reliant on niche tools like NPM or GitHub, otherwise they'd be feeling mightily insecure right now.

I did completely move away from GitHub (which is by now named "ShitHub" in some circles) the moment that Microsoft enforced 2FA on my account.

Yes, perhaps 2FA is a good idea for many scenarios, but if some company forces it upon me, I won't have any tolerance to be willing to be their customer/user anymore.

See [1] for a different perspective on this topic.

---

And yes, I agree with you that is a great idea for a next step to at least strongly reduce (or even cut) your dependence on NPM wherever possible.

---

[1] https://stackoverflow.com/questions/72512276/how-to-disable-...

I think even Microsoft is in too deep to suddenly pull the carpet on NPM/Github. Talk about a public relations nightmare