http://www.kitploit.com/2018/11/nodejsscan-static-security-code-scanner.html
NodeJsScan - A Static Security Code Scanner For Node.js Applications