Open-Source-SicherheitHow much do we really know about how packages behave on the npm registry?22. April 2019