Ask HN: Securing Pip and NPM package use? | Hacker News Reader