3 ms·

Sure, but then you need to have a way to whitelist

• lrvick 1y ago
  The whitelist is the package-lock.json of the hashes of libraries you or a security reviewer you trust has reviewed.