4 ms·Why NPM lockfiles can be a security blindspot for injecting malicious modules1 points by lirantal 7y agochristopherbalz 7y agoIs this something that could/should be done by the package repositories such as npmjs.com?