npm package security is one of the hardest parts of modern Node.js security because the npm ecosystem is massive. The npm registry has more than 2 million packages, making it the largest software registry in the world. That scale helps developers build quickly, but it also creates security risk: abandoned packages, vulnerable transitive...