In the Loop: Auditing Node.js Modules on npm with Node Security Project
strongloop.com