> freezing entire npm setups inside docker containers, which gave me reproducible builds How does that work when enevitably those npm packages are shown to hav

> freezing entire npm setups inside docker containers, which gave me reproducible builds How does that work when enevitably those npm packages are shown to have vulnerabilites?