Security best practices

When using Node.js and npm on AL2027, follow the upstream Node.js security best practices guide on the Node.js website. It covers application-level threats, including supply chain attacks. It also covers mitigations, such as using lockfiles and disabling lifecycle scripts.