Tell HN: Packj flags malicious/risky open-source packages
github.com