How to check security vulnerabilities in your Node.js packages

npm i --package-lock-only
npm audit --registry=https://registry.npmjs.org

Reference: https://docs.npmjs.com/cli/audit