a demo app for node security project package auditing