GitHub's JavaScript failings are someone else's opportunity - Socket has found a way to protect developers from npm, GitHub's insufficiently safe JavaScript package manager, by wrapping it in a security blanket.