This.

Who needs social engineering NPM maintainers when there are thousands of freebie AUR ones.