The add-on page says: "This add-on is not actively monitored for security by Mozilla. Make sure you trust it before installing." As things stand today, gaining

The add-on page says: "This add-on is not actively monitored for security by Mozilla. Make sure you trust it before installing." As things stand today, gaining my trust would require some work on my side (and I'm a professional of IT Security). For the majority of Internet users (who are not expected to understand what 'package-lock.json' file does), this would take a leap of faith instead. Is there any service out there that could scan an add-on and highlight any known vulnerabilities (like OWASP Dependency Checker)? Could the add-on service on Mozilla side automatically run such kind of scan and add red flags next to the current warning, if vulnerabilities are already identified on the add-on or any of its dependencies?