TPT CVE Audit

Scan a dependency lockfile for known CVEs — entirely in your browser, nothing uploaded.