Security has always been one of my biggest worries when using node. The mentality in the javascript world seems to be to simply not care. To just use whatever

Security has always been one of my biggest worries when using node. The mentality in the javascript world seems to be to simply not care. To just use whatever libraries. On all the node.js projects I have worked on, none has had any security aspects when importing a new library. That is a bit scary since many libraries has a ton of dependencies themselves. Not once have I even heard a discussion about a security topic or perhaps maybe vetting dependencies and similar stuff.