npm metadata exposes 53 real maintainer emails for the ms package
A single unauthenticated GET to registry.npmjs.org/ms/latest returns 53 real maintainer email addresses, including corporate @vercel.com and @google.com ones. webpack lists 8 and typescript 7; PyPI exposes emails too, while crates.io has no email fields in its index.
- One GET request to npm returns 53 maintainer emails for ms
- webpack lists 8 addresses, typescript 7, including @microsoft.com
- PyPI exposes emails, though some projects use team addresses
- crates.io has no email fields in its index
Read next
Security