A whitelist in package.json is only a partial assist