Sorry but not using a devpod or a vm for that in this age is just irresponsible. A random npm package can already do a lot of damage.