As mentioned in the article we ran into the same overload and just ended up running `npm audit --production` as part of our CI pipeline since that's what would be going out.