having to `npm login` for the first time in a decade, and then promptly 2FA *again* to publish, is immediately very annoying, multiple times a day :-(