This is a bug in library, something the develops did not know off. When someone has to audit every package first there will be almost no open source anymore. T

This is a bug in library, something the develops did not know off. When someone has to audit every package first there will be almost no open source anymore. The real problem is that the standard library of node/javascript is too small so you need dozens of packages for basic operations.