The fact that things like the npm left-pad incident are so rare is oddly reassuring.