I guess it's hands off the npm jar for a week or three 'cause I am expecting a bunch more packages to be affected at this point.