One-in-two JavaScript project audits by NPM tools sniff out at least one vulnerability...
...and those devs are then applying patches, we hope JavaScript library custodian NPM, after years of security scrambling, looks to be getting a grip on its code safety."