How do you keep dependencies secure?
Model answer
Run npm audit and a tool such as Dependabot or Renovate, commit the lockfile, install with npm ci in CI and production, remove unused packages, review new dependencies before adding them, and keep Node on a supported LTS version.
Learn this topic
Login with JWT: Sign In, Issue a Token and Avoid Timing Leaks in the course MERN Stack Full Course: MongoDB, Express, React and Node.js.
Sign in to add your own answer.