I wrote Node Version Audit to automatically keep track of Node patches, particularly for releases that fix CVEs. While it can be ran directly, it is designed to run as part of a pipeline to produce warnings if the runtime version of Node has CVEs, or is no longer supported.
The cool part (IMO), is that Node Version Audit automatically keeps track of node releases and CVEs by parsing the change log, and so there is no curation needed to maintain it.
I would love any thoughts!