Ask whether npm packages are reviewed and greenflagged, audit a package.json, and request imports.
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Ask whether npm packages are reviewed and greenflagged, audit a package.json, and request imports.