Given the recent pwnage of part of the npm ecosystem, a panicked overreaction from Shopify & RubyCentral almost seems inevitable.