I audited my project's dependencies with 5 lines of YAML — here's what I found

Added a supply chain audit GitHub Action to a typical Node.js project. Three of my most trusted npm packages came back CRITICAL. Here's what that means and what to do about it.