I run them inside a sandbox.

The npm community is too big that one can never discard it for frontend development.