Ask HN: Securing Pip and NPM package use? | Not Hacker News!