It also has some false results. Like package x has a vulnerability in version 1.x And you have a private package @company/x with version 1.x. Than npm audit wil

It also has some false results. Like package x has a vulnerability in version 1.x And you have a private package @company/x with version 1.x. Than npm audit will blame your private package, even if you dont have used the original package x.