"Why I stopped trusting npm audit (and built my own)"

· Dev.to