Some best practices include not hot linking to CDNs, regularly auditing NPM access, avoiding HTTP or Git dependencies, and using fewer dependencies. Additionally, using security tools that detect supply chain risks and thoroughly reviewing the code in dependencies can improve security.