That's great, thank you! Does it check recursive dependencies, and could you make it work against a package you haven't installed yet, by specifying the packag

That's great, thank you! Does it check recursive dependencies, and could you make it work against a package you haven't installed yet, by specifying the package name as an argument, rather than it only looking at what's already installed? If that's possible, it would be really good to then run it against a list of popular packages, like [1] or [2], and report back which packages are the highest priority for getting version bumps (or at least for having someone manually check that the code in the package matches the code in its repo, which we assume an attacker didn't have control over). [1] https://libraries.io/search?order=desc&page=1&per_page=100&platforms=npm&sort=rank https://libraries.io/search?order=desc&page=1&per_page=100&p... [2] https://gist.github.com/anvaka/8e8fa57c7ee1350e3491 https://gist.github.com/anvaka/8e8fa57c7ee1350e3491