Hacker News Reader

If you are looking for something that helps you keep your OSS packages secure, then Snyk[0] is doing an excellent job at it.

Snyk only checks for known vulnerabilities, not if the package itself is malicious.