[avichalp]

If you are looking for something that helps you keep your OSS packages secure, then Snyk[0] is doing an excellent job at it.

[0] https://snyk.io

[riyakhanna1983]

Snyk only checks for known vulnerabilities, not if the package itself is malicious.