Supply chain npm vs PyPI: I compared both simulations and the most dangerous vector isn't what everyone thinks

Supply chain npm vs PyPI: I compared both simulations and the most dangerous vector isn't what everyone thinks I'd just finished the PyPI post, closed the terminal feeling good about myself, and then sat there staring at two result files open in parallel splits: npm-simulation-results.json on the