1-in-2 JavaScript project audits by NPM tools sniff out at least 1 vulnerability (theregister.co.uk)