bodadotsh / npm-security-best-practices [Updated for AI 🤖] Continuous updates on how to stay safe from NPM supply chain attacks