Yeah don’t worry about it too much. Ensure you have the correct name when installing your library but that’s about all you can do personally.
Any other solution will have some security flaws. NPM has a few more than it should but essentially the entire web is built around it. Sorry man, you don’t have any other choices.
How to use it properly? Any npm tutorial will show you quickly. Always check you’ve got the right thing, always check the library is large enough that if something goes wrong it’ll be noticed, and know there’s no way to be completely safe without never using libraries.
If you’re learning the web though there’s no way to avoid npm.
Normally I’d say fuck Nintendo but palworld obviously stole the designs and artistic direction for many of their characters.
Most of the pals I saw at first were modified versions of an already existant pokemon with little to seperate it from fan art of that pokemon. This is particularly agregoous as they clashed against the rest of this games aesthetic. Nothing that was original fit with the design of the pokemon rip offs.
Many other games have a pokemon esque aesthetic without direct copying. It looking similar is not my issue. My issue is that while playing I could easily name most pals to a pokemon. Seriously, look up comparisons. It’s blatant.
They’ve moved away from thisbrecently but fuck man if it ain’t obvious. If they did the same to some small project I’d assume people would be much more up in arms, rightfully so.
Still though, I won’t cry if Nintendo loses. I hope they pay an insane amount in lawyers fees either way and never see a dime out of the case