YarnAudit Finds CVEs in Node modules included as dependencies in a project that is packaged by Yarn. See the NodeAudit doc for configuration options.