Congratulations on getting funded! Openbase looks cool. What worries me though is how secure are NPM packages. Is this something that openbase will address in the future?
Absolutely.
First, we are working on surfacing open-source security advisories over the next couple of months in Openbase.
Second, we're still figuring out ways to flag other security concerns, such as 2FA, newly appointed maintainers, suspicious activity, etc. (this is to be expected in the longer term)