G github.blog NPM publish-time malware scanning and dual-use metadata 5 points Bobaso 3 months ago 3 comments