The security implications of packages in front-end apps | Hacker News Reader