Another one-line npm package breaks the JavaScript ecosystem

An update to tiny "is-promise" library impacted millions of JavaScript projects.

https://www.zdnet.com/article/another-one-line-npm-package-breaks-the-javascript-ecosystem/