Describing NPM as boring is a stretch. Given its security model, i think spicy is a far more apt label.

I have switched to pnpm already.