Node is working to add module based permissions: https://nodejs.org/api/permissions.html

This might help against the supply chain attacks which node is also prone to after adding support for url imports (Yes, you can import directly from url in node too).