It makes more sense to attack packages in NPM since it's by far the most popular package manager.