Audit Node Modules With YARA Rules vs BoostSecurity Software Supply Chain Protection (2026) | Compare Software Composition Analysis Tools