NPM publish-time malware scanning and dual-use metadata
github.blog