One-in-two JavaScript project audits by NPM tools sniff out at least one vulnerability...

...and those devs are then applying patches, we hope

JavaScript library custodian NPM, after years of security scrambling, looks to be getting a grip on its code safety."