GitHub Action to catch unsafe NPM package updates in lockfilesgithub.com/danielroe3 pointsmustaphah9 months ago