npm package commitment scores: zod has 139M weekly downloads and one maintainer

Supply chain attacks are not a novel threat. But there's a pattern in the data that rarely gets...