Hardening npm dependency security

Approaches to reduce the risk of supply chain attacks in npm dependencies.