npm Has a Free Security Advisory API — Find Vulnerable Packages Before They Break Your App
Last month, a popular npm package with 10M+ weekly downloads got compromised. Teams scrambled to check if their projects were affected. Most used npm audit — but that only catches known vulnerabilities in your lockfile. What if you could programmatically…