Unlocking security updates for transitive dependencies with NPM | Hacker News Reader