Also, how many of the required NPM packages will be compromised?