Porn? Distributed and/or managed by an NPM package?

What could go wrong?