Npm audit should be added to the list in place of NSP as the service is now deprecated [1].

[1] https://blog.npmjs.org/post/175511531085/the-node-security-p...