rem’s Twitter Archive—№ 65,559

mlms13 SchizoDuckie github package-lock which is a flatten version of the package, so it's a deep dep that's bad, and they don't offer remediation. This is where snyksec excels.