https://www.somethingsblog.com/2024/10/15/safeguarding-node-js-apps-from-malicious-dependencies/