If I hear what you're saying right... you're saying that someone working in node.js should be concerned with the vulnerabilities in system libraries of the OS t

If I hear what you're saying right... you're saying that someone working in node.js should be concerned with the vulnerabilities in system libraries of the OS that node.js runs in. Bringing up Bazel to deal with system dependencies is going down the road of DevOps rather than Dev. Docker is pitched as Dev. A lot of them don't care about the lower level ops. There is something to be said for separation of concerns and targeting each concern well. Our current problems are because we're doing a poor job mixing concerns or even understanding the separation.