I have a Node.js app which has a lot of npm-dependencies, running on Linux (Centos) machine.
When Node starts, the script has access to the files outside its directory (as least by default), so malicious npm-package could traverse a directory tree and read config files, etc.
I would like to restrict FS access to the script directory only. Is this possible?
