Very useful for distinguishing between genuine node packages from imposters. eg. https://snyk.io/advisor/search?source=npm&q=nodemailer