npm audit

...runs some sort of security audit against your code. More scary yet, you may tell npm to "correct" what it finds with:

npm audit fix