I'd agree. We had Java and used and enterprise package proxy to reduce the risks. Wouldn't do that for npm. Also these machines were on a seperate network with

I'd agree. We had Java and used and enterprise package proxy to reduce the risks. Wouldn't do that for npm. Also these machines were on a seperate network with no share access for example - not on the corporate network with all the other machines.