Runbook: Dependency Vulnerability ResponseProcedures for responding to CVEs and vulnerabilities in npm dependencies