There have been many Supply Chain attacks in the NPM ecosystem and it would be good to introduce some security best practices to the project.