It's made with Npm, which makes me wonder if it's really safe ...

But I only read the news when it comes to npm, so maybe my fear is not justified.