`npm audit`: identify and fix insecure dependencies
blog.npmjs.org