In 2013, when I last performed a secure code review on Node.JS, it did not look pretty.

Now the vulnerability pie looks like the following;

Impressive change.  Over the coming months, we will dig into the fixes and remediations involved to reduce the risk to the Node.JS community.