npm audit

and

   npm audit --fix

Or if you want to know the version of a package you have installed:

   npm ls some-pkg