Aside from validating your dependencies, when you run the code ensure it can't phone home. On AWS, lock-down outgoing traffic. The Node instance (heaven help y

Aside from validating your dependencies, when you run the code ensure it can't phone home. On AWS, lock-down outgoing traffic. The Node instance (heaven help you if it's in a browser) on the back-end shouldn't be able to get out to anything, with the necessary exceptions of your codes back-end data store, and, perhaps temporarily, your deployment store.