[bodash]

GitHub repo (800+ stars) on a list of tips for protecting against npm supply chain attacks: https://github.com/bodadotsh/npm-security-best-practices

[TZubiri]

There's no magical solution, you just have to use (WAY) less dependencies