Scan npm packages and get their package.json, get license and other information, indicate the possible impact on the project.