3 tools and resources
A tool to run YARA rules against node_module folders to identify suspicious scripts
A tool that safely installs packages with npm/yarn by auditing them as part of your install process.
Tool to inform about potential risks in project dependencies list.