Astro is based on npm is it not? Given the state of that ecosystem and the rate at which new vulnerabilities are being discovered these days, I prefer to stay as far away from Node as I can.

Npm? It’s just the package manager. You can use pnpm or yarn or bun if you like?

[flagged]