Gar

Changing `mfa=false` to `mfa=none` so that the code doesn't have `'false'` strings it's parsing. Having a string with a value `false` is a little confusing. We can bike shed this...

#3764 was a misunderstanding of how the cache worked.

Thanks @lukekarrys, I just kind of infodumped into this to get started, that's a subtask, updated the issue body to reflect that.

In hindsight the support levels being set at "when it went lts" were kind of arbitrary, and absent any features in 14 we want to start using, I don't think...

I can see us using private class methods once available. that will clean up a LOT of hard to read code, which is very important to me.

After a bit of discussion we have identified a root problem here being that we are conflating support and compatibility. Engines denotes compatibility. This is distinct from a "support" contract....

@lukekarrys can this be closed?

`npm init` does not currently have a config item that alters the `private` flag.

`npm bin` currently does not accurately represent everywhere npm looks for a bin when one is asked for. Providing it as a command invites folks to add it to their...

This looks like it is a similar PR to https://github.com/npm/npm-package-arg/pull/38, which suggested `project` as the attribute.