In 2013, when I last performed a secure code review on Node.JS, it did not look pretty.
Now the vulnerability pie looks like the following;
Impressive change. Over the coming months, we will dig into the fixes and remediations involved to reduce the risk to the Node.JS community.