On: NPM Vulnerability Discussion on Twitter

[TAForObvReasons]

For NPM use https://verdaccio.org/ . It can proxy the public registry. Install your project and it will pull and cache the dependencies. Once cached you can remove the uplink and it will only serve the cached version