Comment by javajosh

One of the first things that come to mind would be to add the ability to shell out and run npm, so people could add dependancies.

Then of course, I would add a backdoor that allows me to update running code without involving github. Might want to try to break out of whatever chroot is going on and subvert the image.

I'd suggest an out-of-band once a day full image restore.