Cover Your Apps While Still Using npm: nodesource.com/blog/cover-you… (Ways to avoid the npm repository being a single point of failure.)