npm-security-best-practices

No plain-English explanation yet — one is being written right now. Check back in a minute.