[thepill]

How do you test your projects if there are any infected/affected dependencies used? As i understand it could also be a dependency of a dependency ... that could be affected?

[efortis]

   npm audit

and

   npm audit --fix

Or if you want to know the version of a package you have installed:

   npm ls some-pkg