There's a thread going around about how the current npm vuln is because they're vc funded, and that's why we should be using yarn instead. regardless of whether that statement is accurate, it made me realize i have no idea if yarn is a facebook project or not
That open source decision was driven by my discussions with dozens of community members who wanted this. The repo was shared with the Angular, Ember, React and Polymer teams before the project was even called Yarn.
he/him 