I built an open-source vs-code extension to scan vulnerable dependencies and avoid getting compromised via another supply-chain.