NPM package vm2 is no longer secure | Hacker News Reader