Best practices for creating a modern npm package with security in mind ...