G github.com GitHub Action to catch unsafe NPM package updates in lockfiles 3 points mustaphah 1 year ago 2 comments