You could probably also use use Fossa or Kenna, but those will require a
lot more registration + setup than just opening Chrome Inspector, which
has Snyk built in. That’s how I found today’s security hole in an
older version of jQuery used by a Hugo theme.