packj: detect malicious/risky open-source software packages

https://securityonline.info/packj-detect-malicious-risky-open-source-software-packages/