Maybe all dependencies in package.json should be pinned to an specific version? https://snyk.io/blog/axios-npm-package-compromised-supply-chain-attack-delivers-cross-platform/
Maybe all dependencies in package.json should be pinned to an specific version?
https://snyk.io/blog/axios-npm-package-compromised-supply-chain-attack-delivers-cross-platform/