tinyNpm VS Code extension flags stale npm packages to prevent supply chain attacks

tinyNpm is a new VS Code extension that helps protect against npm supply chain attacks by showing the latest package version and its age. It removes caret (^) from version ranges for stricter control and provides hover warnings for staleness, high dependency count, and download numbers. The tool uses the npm API to deliver security-focused hints directly in the editor.