For node, isn't nsp already free to use?

https://github.com/nodesecurity/nsp