https://vulert.com/blog/10-software-effective-npm-security-practices/