Comment by vitaliyf

You run a private NPM mirror where you copy dependencies that you rely on, after auditing them (for code quality and licensing).