I scanned the top 20 npm packages. Everyone passed CVE checks, but here's what the static analysis found April 20, 2026 · Dev.to Read full story at source