Approaches to reduce the risk of supply chain attacks in npm dependencies.