JavaScript, Nodejs, Security, NPM.
dependencies means having a smaller attack surface. Some larger companies will actually have a team hand-audit each package and whitelist versions of packages which the rest of the company is then allowed to use! This approach isn’t that practical considering the sheer number of packages available