I wonder how fast it would propagate if it was able to inject itself into existing repos and hook itself to package.json and other installer scripts.