The security risks of front-end dependencies | Hacker News Reader