[kevwil]

npm is currently a security nightmare, so while it provides a ton of useful functionality it also goes to Gitlab's position on the security of Microsoft products.