https://zoenolan.org/2022/09/language-choices/
Today, I'd add having some sort of a plan on how to deal with npm attacks but wouldn't see that as a deal breaker.
This move has allowed me to maintain a project for long times while still maintaining my peace of mind.