I think this is a great reminder that if you work with JS to pin your dependencies with a lock file and to have some process to verify packages before blindly u

I think this is a great reminder that if you work with JS to pin your dependencies with a lock file and to have some process to verify packages before blindly updating them.