Ahh, the classic I don't care. What if other people don't care about your problems? What if both sides don't care about each other? What then?

We wait and see whether the supply chain attacks crescendo to a crisis and force NPM's hand. In the meantime I'm doing everything I can to avoid NPM and to uphold "just don't use the software if you don't like it"... but people like myself don't always have a choice.