title: NPM (node package manager) security and voting
body: <p>Anyone can publish their <strong>Node.js</strong> package to open Node Package Manager (<strong>npm</strong>) pool.
  Is there any security checks for published packages so that I can be sure that a new package won't contain any harmful code?</p>
  
  <p>Also it's interesting to know if there is any voting system for node packages so that I can pick out the most voted package from a bunch of similar node packages?</p>