DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
Node.js Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
medium
Node.js
Why does every dependency in a Node.js project (including transitive dependencies) matter for security?
A
They don't — only direct code you write matters
B
Every dependency runs with the same privileges as your application code, so a compromised package is a direct route to full application compromise
C
Dependencies are automatically sandboxed by npm
D
Only devDependencies pose any risk
Check Answer