javascript ecosystem is too dangerous