I Wanted to Pay My Dependencies. Only One of Three Registries Would Let Me Find Out Who to Pay.

I run a small actor that normalizes package metadata across npm, PyPI and crates.io — version, license, download counts, the usual. Every so often a supply-chain incident makes the news and I go looking at who actually maintains the package underneath it, and this time I had a more specific, more selfish question: if I wanted to send a few dollars... Weiterlesen