The State of Node.js Security [I]