auto-updating is bad. Scheduled, audited updates are good. Installing random npm packages as suggested here is also bad. Especially with "--global", although

auto-updating is bad. Scheduled, audited updates are good. Installing random npm packages as suggested here is also bad. Especially with "--global", although I'm not sure if that makes any difference because Node by default of course can access all of your file system.