[meander_water]

This is already a solved problem.

Snyk advisor provides a decent package health score - https://snyk.io/advisor/npm-package/react

[jobehi]

According to my algo, Snyk is also dead.