Just use dependency cooldown. It will mitigate a lot of risk.
If you started your Node project yesterday, wouldn't that mean you'd get the fix later?
alt Hacker News
If you started your Node project yesterday, wouldn't that mean you'd get the fix later?