On: How Go mitigates supply chain attacks

[bigdubs]

Yes Node.js ships with what is effectively a very thin standard library for some low level things like interacting with the file system, the process model, some security features like TLS.