RetireJS's tracked open-source repos, sorted by stars.
scanner detecting the use of JavaScript libraries with known vulnerabilities. Can also generate an SBOM of the libraries it finds.