On any page that collects any data that you don’t want me (or my fellow attackers) to have, don’t use npm modules. Or Google Tag Manager, or ad networks, or analytics, or any code that isn’t yours.
I am depressed. Not because it’s dead. Because i still have mountains of digital mayhem (‘Junk’) to deal with.