Should a new repo be made with only known safe branches?

[MidSpike]

Do you think you should make a new repo with only the branches that are known to be safe to prevent npm from accidentally installing an unsafe branch? Or does npm only access releases?

Originally posted by @bradenbest in https://github.com/MidSpike/node-ipc/issues/1#issuecomment-1073033353