Checking for vulnerable Node.js modules

The best tool I’ve found for validating a project’s packages for known vulerabilities is nsp. It checks the installed Node.js modules against the known vulnerabilities in the nodesecurity.io database