A demo security scanner published to npm that reports some packages as fatal - View it on GitHub