npm audit

Key Takeaways npm audit can only compare your tree against advisory data, so a malicious version published an hour ago won’t be flagged. Closing that gap takes more than one...