Nicholas Zakas

Just say, hey, if you want the fastest notification of potential security threats or what have you, you sign up for the service, we're going to use that money, funnel it into the NPM team, and start funding it that way.

I feel like there's a lack of creativity in the solutions at this point because there's a whole world of possibilities out there to be able to turn NPM from just like a cost sink into something that could maybe break even or maybe at least just not be the albatross that you're dealing with constantly.

I think it's wishful thinking at this point that GitHub would willingly spin off NPM into a foundation.

I mean, they could certainly do it.

It wouldn't hurt them financially to just say, hey, you know what?

We want to start a foundation or give it to the OpenJS Foundation.

As part of that, we've come to an agreement with Google and Meta and whoever else that we're going to jointly fund

registry operations, by donations to the OpenJS Foundation.

The OpenJS Foundation will be in charge of hiring engineers to work on it based on that.

Maybe that's an off-ramp for them.

I don't know if they'd be open to that.

But there's a lot more options out there than I think are being discussed or even considered at this point.

Would you do that, Nicholas?

Yes.

Hey, happy to.

If I can help.

Well, I'm at the moment independent software engineer.

So I just take on contracting, consulting work.

I work on ESLint as I'm able.

And I do coaching for software engineers, just helping people