I am starting to use
npm install a lot for development, but I fear about its security consequences. Does
npm install retrieve binaries or sources?
If it's binaries, it's already a deal breaker for me.
If it's sources, what level of scrutiny is the node.js community having over the package repository? (E.g. I would like to compare this repository to other repositories, such as debian package repositories, which I guess are the safest out there.)