This is what we do at https://socket.dev.