Issue 276 - Top security best practices when using npm (18)