Good insight.. in fact, great article.
I wanted to raise a bug issue against these reported packages, and i started to cross check first. I started with express what i found about the package “Yummy” — Nothing.
I couldnt find that package at all. May be i missed something, Could you share the dependency path to “yummy” from express package.json ?