`npm audit` for known issues