Sacrasm aside, saying &quot;node.js&quot; strongly implies use of npm, and that means pulling <i>a lot</i> (think deps-of-deps-of-deps) of potentially unaudited code off the network, without much authentication.<p>Not something one would fancy for a tool that handles sensitive data.