Webpack blogged about this in their blog here: https://medium.com/webpack/trivago-helps-secure-webpacks-fut...

I am working for trivago. If you have any questions, i can answer them or forward them to the right team to get the answer. AMA!