Both snyk & sonatype have free-ish versions of their package scanners. & npm has it's built in, but imho, useless `audit` command, which offers to upgrade & break everything. https://x.com/BleepinComputer/status/1451954522079875076
Post
October 25, 2021