Part II — Third-party libraries: the vulnerability layer nobody counted

When your Node.js service pulls 847 npm packages to serve a login form, you are not running one application. You are running 847 applications — most written by someone who needed to scratch an itch and moved on.