In L3, the sentence that says:

Do not install software via pip, gem, pulling down a git repo from an external source, etc.

should explicitly mention npm, for clarity and obviousness.

Suggested by @sbassett.