The next evolution is something that also sandboxes the project. A random npm library that gets installed shouldn't be allowed to access anything other than you

The next evolution is something that also sandboxes the project. A random npm library that gets installed shouldn't be allowed to access anything other than your project root. But it also has to be fast and convenient. Docker is still too slow to fill that role.