Npq: audit JavaScript packages before install | Hacker News Reader