GitHub Action to catch unsafe NPM package updates in lockfiles | Heykuki News