Tool selection gets messy once the first pull-request comments arrive. This list focuses on what happens after procurement: ...
The tool gathered over 29,000 downloads before the malicious npm package was identified ...