LavaMoat – securing JavaScript supply chains | Dark Hacker News